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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/07/2011 


To: Cyber Cccs/CCU3 
San Francisco Squad CY-2 
Washington Field Squad CY-4 


From: Sacramento 
Squad CY-1 
Contact: 


SA 


Approved By: b3 
b6 

Drafted By: b7c 
b7E 

Case ID #: 

Title: Unsub(s), 

ANONYMOUS ; 
HBGARY - VICTIM; 
CI - CRIMINAL 

Synopsis: Case opening. 

Details: on 02/06/2010,[ _-__ id 

contacted FBI Sacramento and reported that his company ha een 

hacked by the group ANONYMOUS. Specifically, two Linux servers 

and the company's Google corporate email accounts for all 

employees were compromised. bé 
b7c 

By way of background, [ ____explained that HBGary is 

based in Sacramento, CA. A second company called HBGary Federal 

was created two years ago by HBGary to facilitate contracts with 

the federal government. HBGary Federal did classified work for 

vernment agencies, including DoD, CIA, and NSA. 
Some _ time in the 

b6 
b7C 


Apparently 
ecame aware o activity and attacked 
HBGary and HBGary Federal as a form Of revenge. 


UNCLASSIFIED 


® ® 


UNCLASSIFIED 


b3 


To: From: Sacramento 
Re: (NEW), 02/07/2011 b7E 


b6 
b7C 


ANONYMOUS compromised and _ downloaded 
the contents. Since the group 
gained access to all of HBGary's email accounts and the contents 
therein. The group also compromised HBGary Federal's web-server 
in Colorado Springs, HBGary's customer portal server, and the 
server hosting domain, www.rootkit.com. The 
www.rootkit.com server was not part of the corporate network, but 
was located in Sacramento, CA, near the other compromised HBGary 
server. The servers did not contain any classified material or 
source code for HBGary's main product. However the servers may 
have contained data from over 80,000 customer accounts which was 
sensitive in nature. Likewise, the email contents did not 
contain any classified materials, but my have contained snippets 
of source code and customer data which was sensitive in nature. 


On the afternoon of 02/06/2011,|_____— learned that 
compromised information was being made available via the website 
thepiratebay.org and via Torrent download. HBGary identified at b6 
least 3 email accounts which were placed online, including the . b7c 
accounts of another HBGary Federal employee, and an 


HBGary employee 


feared for the repercussions it would have for 
his company, since sensitive customer data was potentially stolen 
and customers may lose trust with the company. L___fintendea bé 
to contact his attorneys _and pursue civil_action against the bic 
of ANONYMOUS. indicated 


According eee scheduled to meet 
with agents of the Washington Fie Office (WFO) on ——— 


02/07/2011. On _ 02/07/2011, SA SA 


eee end ra EREE with bs 
representatives of HBGary, including b7c 
eee that the email accounts for both HBGary and 


HBGary Federal employees were compromised. Additionally, 

stated that HBGary Federal was a subsidiary of HBGary, and that 
both companies were incorporated in Sacramento, CA. HBGary 
technicians were in the process of forensically preserving 
compromised systems and determining the extent of intrusion and 
which accounts were compromised. HBGary employees would document 
the financial loss sustained during the incident, would identify 
any IP addresses from which the intrusion activity originated, 
would identify all client and employee personal identifiers 


UNCLASSIFIED 


2 


UNCLASSIFIED 


To: om: Sacramento 
Re: (NEW), 02/07/2011 b3 
b7E 


compromised and/or used by the hackers, and would analyze the 
compromised systems and share the information with the FBI. 


The captioned investigation is being opened in order to 
determine the subject (s) conducting the network intrusion of 
HBGary, HBGary Féderal, and the employee email accounts hosted by 
Google, for possible violation of federal law including computer 
intrusion, identity theft, and internet extortion. It is 


requested the caption investigation be opened and assigned to SA 
b7C 


agent. 


UNCLASSIFIED 


3 


@ e 


UNCLASSIFIED 


To: Cyber From: Sacramento 
Re: rd (NEW), 02/07/2011 “3 
b7E 


LEAD (s) : 
Set Lead 1: (Info) 
CYBER 


AT CCU-3, DC 


Information provided for CyD/CCS/CCU3. Read and clear. 


Set Lead 2: (Info) 
SAN FRANCISCO 
AT SAN JOSE, CA 
FBI San Francisco, San Jose RA, Squad CY-2, is notified 
of the opening of Sacramento's investigation. HBGary 
representatives indicated that the group ANONYMOUS was the group 
which was involved in the recent DDoS attacks in retaliation for 


corporate response to the Wikileaks documents release. Read and 
clear. 


Set Lead 3; (Action) 
WASHINGTON FIELD 
AT CHANTILLY, VA 


Washington Field Office, Northern Virginia RA, CY-4, is 
notified of the opening of Sacramento's investigation. 


to requests WFO provide details of the interview(s) of 
concerning the intrusion activity described above. b6 
b7c 


+4 


UNCLASSIFIED 


4 


® @ ICMIPRO1 


19:41:19 FD-192 Page 1 


08/31/11 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
, CONSENTING PARTY 


08/30/2011 
Anticipated Disposition: ai - Case — 
Description of Property: Date Entered “be6 
1D 1 ‘b7C 
: b7E 
08/30/2011 (2 CDS) 
SOURCE = TELEPHONIC 
Barcode: H03138362 Location: ELSURVAULT 08/31/2011 
Case Number: 
Owning Office: SACRAMENTO . se 
b6 
* b7c 
b7E 


SUPV. INITIAL 


FILE COPY [ | | 


02/11/11 ICMIPRO1 
19:05:38 Page 1 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


02/08/2011 


Anticipated Disposition: Acquired By: Case Agent: 
DESTROY eee po 


Description of Property: Date Entered 
1B 1 


b7c 


CD LABELED D20110207-010 


Barcode: E4676641 Location: ECR 1 02/11/2011 


FILE Gopy SUPY. INITIA 


02/11/11 ICMIPROL 


19:05:38 Page 2 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


02/08/2011 


Anticipated Disposition: Acquired By: Case Agent: 
DESTROY a ae 


Date Entered 


b7c 


Description of Property: 
1B 2 


CD LABELED D20110207-009 


Barcode: E4676642 Location: ECR 1 02/11/2011 
Case Number: oe 
Owning Office: SACRAMENTO mae 
b7E 


FILE EIpY SUPY INITIAL | 


02/11/11 ICMIPRO1 
19:05:38 FD-192 Page 3 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from _which Property Acquired: 


02/08/2011 
b6 
Anticipated Disposition: : : 
DESTROY 
Description of Property: Date Entered 
1B 3 
CD LABELED D20110207-011 
Barcode: EB4676643 Location: ECR 1 02/11/2011 
Case Number: aa 
Owning Office: SACRAMENTO ie 
b7E 


FILE BOPY SuPV. INA | 


02/11/11 ICMIPRO1 
19:05:38 FD-192 Page 4 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from which Property Acquired: 


02/08/2011 


Anticipated Disposition: Acquired By: Cas ioe 


Description of Property: Date Entered 
1B 4 


b6 
b7C 


CD LABELED D20110207-013 


Barcode: E4676644 Location: ECR 1 02/11/2011 


b6 
Case Number: | b7c 
Owning Office: b3 


b7E 


TLE COFY SUPV.INTIA | 


02/11/11 ICMIPRO1 
19:05:38 FD-192 Page 5 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from which Property Acquired: 


02/08/2011 Ss 
b7c 
Anticipated Disposition: i : t: 
DESTROY 
Description of Property: Date Entered 
1B 5 
CD LABELED D20110207-014 
Barcode: H4676645 Location: ECR 1 02/11/2011 
| 
| 
| 
| 
Case Number: 2 
Owning Office: SACRAMENTO hea 
b7E 


FILE GOPY SUPY.INTIA | 


02/11/11 ICMIPROL 
19:05:38 FD-192 Page 6 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


02/08/2011 
b6 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 6 
CD LABELED 20110207-015 
Barcode: E4676646 Location: ECR 1 02/11/2011 
Case Number: b3 
Owning Office: SACRAMENTO b6 
b7C 
b7E 


FILE ETIBY SuPY.INTIAL | 


02/11/11 ICMIPRO1L 
19:05:38 FD-192 Page 7 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


02/08/2011 


Anticipated Disposition: Acquired By: Case Agent: 


Description of Property: Date Entered 
iB 7 


CD LABELED D20110207-012 


Barcode: E4676647 Location: ECR 1 02/11/2011 


Case Number: 
Owning Office: SACRAMENTO 


FILE Copy SUPY. INITIAL 


20:00:33 FD-192 


02/23/11 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


02/16/2011 


Anticipated Disposition: : H 
DESTROY 


Description of Property: 


1B 8 
cp tapeuep[ ~~ eva, soon 
Barcode: E4765530 Location: ECR 1 


Case Number: 
Owning Office: SACRAMENTO 


FILE GOPY 


ICMIPRO1 
Page 1 


Date Entered 


02/18/2011 


b6 
b7C 
b7E 


03/11/11 
15:08:29 


FD-192 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 


Anticipated Disposition: ao - 


RETURN 


Description of Property: | 


1B 10 


HARD DRIV 
SVRO1HDO1 


Barcode: EB4765594 


Case Number: | 


Owning Office: 


FILE GURY 


Location: ECR 1 


SACRAMENTO 


ICMIPRO1 
Page 1 


Date Entered 


WITH EVIDENCE LABEL ID 


(#1) 
03/11/2011 


SUPV. INITIAL | 


b6 
b7c 


b6 
b7c 
bTE 


b3 
b6 
b7C 
b7E 


03/11/11 
15:08:31 FD-192 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 


Anticipated Disposition:_Acquired By: 


Description of Property: 
1B 11 


HARD DRIVE, SEAGATE 1 TB, s/x[ | WITH EVIDENCE LABEL 


ID SVROHDO2 (PARTIAL HDD1) 


Barcode: EH4765595 Location: ECR 1 


Case Number: 
Owning Office: SACRAMENTO 


FILE GURY 


ICMIPRO 
Page 


Case = 


Date Entered 


(#2) 


03/11/2011 


SUPV. wml 


1 
1 


b6 
b7Cc 


b6 
b7C 
bTE 


b3 
b6 
b7C 
b7E 


03/11/11 ICMIPRO1 
15:08:34 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: Source from which Property Acquired: 
03/10/2011 
Anticipated Disposition: j : Agent: 
RETURN 
Description of Property: Date Entered 
1B 12 
HARD DRIVE, MAXTOR 250 GB, a e LABEL ID 
svroapo2 [_____————*dBO2 (#3) 
Barcode: E4765596 Location: ECR 1 03/11/2011 


Case Number: 
Owning Office: 


FILE CORY 


SUPV. INITIAL 


b6 
b7C 
b7E 


b3 
b6 
b7Cc 
bTE 


ICMIPRO1 


03/11/11 
Page 1 


15:08:36 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 


Anticipated Disposition: Acquired By: ~ Case Agent: 
Pero Cd] a 
b6 


Description of Property: 
1B 13 


HARD DRIVE, MAXTOR 250 GB, S — ae LABEL ID 
SVRO3HDO1 HDI (#4) 


Barcode: E4765597 Location: ECR 1 03/11/2011 


Case Number: | 


Owning Office: SACRAMENTO 


FILE GUIPY SUV INT 


Date Entereq P7¢ 
b7E 


b3 
b6 
b7C 
b7E 


03/11/11 ICMIPRO1L 
15:08:38 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: 
03/10/2011 
Anticipated Disposition: Acquired By: Case Agent: 
b7C 
Date Entered b7E 


Description of Property: 


1B 14 
EXTERNAL USB DRIVE, SEAGATE, BLACK, s/n[ | (#5) 
(ATTACHED TO SUPPORT) 
Barcode: E4765598 Location: ECR 1 03/11/2011 
Case Number: ce 
Owning Office: SACRAMENTO ee 


Fie CORY SLPV. INITIAL | - 


03/11/11 ICMIPRO1 
15:08:40 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 
Anticipated Disposition: J : ne: 
RETURN 
Description of Property: Date Entered 
1B 15 


EXTERNAL HARD DRIVE, WESTERN DIGITAL MY PASSPORT, SILVER, 
s/N[—~S~*~*=*dS WITH! USB CABLE (ATTACHED TO SUPPORT) (#5) 


Barcode: E4765599 Location: ECR 1 03/11/2011 


Case Number: 
Owning Office: SACRAMENTO 


suv. mimic | | 


FILE GLIEY 


b6 
b7Cc 


b6 
b7C 
b7E 


03/11/11 ICMIPRO1 
15:08:42 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: Source from which Property Acquired: 
03/10/2011 
Anticipated Disposition: Acquired By: Case Agent: b6 
eee DE 
Date Entered 


Description of Property: 
1B 16 


HARD DRIVE, WESTERN DIGITAL 1 TB, S/M___—————=« WITH 
DIGITAL STORAGE MEDIA TD[__sFNCASE EVIDENCE FILES) (#7) 


Barcode: E4765600 Location: ECR 1 03/11/2011 


Case Number: 
b6 


SUPV. INITIAL 1] 


FILE GORY 


03/11/11 ICMIPROL 
15:08:44 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: 
03/10/2011 
Anticipated Disposition: Acquired By: Case Agent: 
b6 
Description of Property: Date Entered b7c 
1B 17 bT7E 
HARD DRIVE, WESTERN DIGITAL, 1 TB, s/s| sd TH 
DIGITAL STORAGE MEDIA ID DSMO5 (ENCASE EVIDENCE FILES) (#8) 
Barcode: E4765601 Location: ECR 1 03/11/2011 


- GIPY SUPY. wma |_| 


E] Fas erent 


03/11/11 , ICMIPRO1 
15:08:46 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 
Anticipated Disposition: Acquired By: 7 BS 
RETURN [ oe 
b7E 
Description of Property: Date Entered 
1B 18 
3 SERVER WORKSHEETS (#9) 
Barcode: E4765602 Location: ECR 1 03/11/2011 
Case Number: b3 
Owning Office: SACRAMENTO _ 
c 
b7E 


FILE GURY 


ae 


03/11/11 , ICMIPROL 
15:08:51 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


03/10/2011 
b6 
Anticipated Disposition: Acquired By: Case Agent: aS 
Description of Property: Date Entered 
1B 19 
Barcode: E4765603 Location: ECR 1 03/11/2011 
Case Number: = 
Owning Office: SACRAMENTO ae 
b7E 


FILE COPY SUPY. INTIAL 


04/08/11 ICMIPRO1 
14:42:21 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
EMAIL ENTURBULATION.COM 


Date Property Acquired: Source from which Property Acquired: 


04/04/2011 
Anticipated Disposition: Acquired By: : b6é 
Description of Property: Date Entered 
1B 20 


#1- MAILING ENVELOPE CONTAINING: 
#2- UNLABELED DVD+R 


Barcode: E4765651 Location: ECR 1 . 04/08/2011 


Case Number: b3 
Owning Office: SACRAMENTO ee 
b7E 


FILE EOPY SUPV. INITIA 


d , ICMIPRO1 


06/07/11 


14:13:01 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


SA 
06/07/2011 CART LAB b6é 
SACRAMENTO b7c 
Anticipated Disposition: Acquired By: Case Agent: 
RETURN eee! cael! 
Description of Property: Date Entered 
1B 21 
= DIGITAL CART OWNED HD, SER NUMBER Re 
BEST EVIDENCE IMAGE OF = 
2 - CART CASE NOTES: INTAKE WORKSHEET e 
#3 - FORENSIC MD5 DOCUMENTS 
Barcode: E4676780 Location: ECR 1 06/07/2011 
Case Number: a 
Owning Office: SACRAMENTO be 
b7C 
| b7E 
FILE Bigey 
, ne SUPY. INITIAL 


06/08/11 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: ich Property Acquired: 


06/07/2011 CART LAB 
SACRAMENTO 


Anticipated Disposition: Acquired By: Case Agent: 


Date Entered 


| ae of Property: 


#1- ONE CART OWNED WESTERN DIGITAL HARD DRIVE, SERIAL NUMBER 
BEST EVIDENCE IMAGE OFL_ 


2-CART CASE NOTES: INTAKE WORKSHEET 
#3-FORENSIC MDS DOCUMENTS 


Barcode: E4676784 Location: ECR 1 06/07/2011 


FILE COBY SLIPV. INITIA 


ICMIPROL 
14:44:57 FD-192 Page 1 


b6 
b7c 


b3 
b6 
b7C 
b7E 


| Case Number: b3 
| Owning Office: aes b6 
b7c 


bTE 


eo -> e@ 
06/08/11 ICMIPROL 


14:44:59 FD-192 Page 1 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
sf caer inp 


06/08/2011 
SACRAMENTO b6 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 23 
#1 - CART OWNED SEAGATE HARD DRIVE, 500 GB, SERIAL NUMBER b3 
b7C 
Barcode: E4676785 Location: ECR 1 06/08/2011 bE 
Case Number: s 
Owning Office: SACRAMENTO tee 
b7E 


FILE COPY suPv.NTA | 


06/08/11 ICMIPRO1 
15:42:20 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
sal) SACRAMENTO CART LAB 


06/08/2011 
SACRAMENTO b6 
b7C 
Anticipated Disposition: Acquired By: : 
Description of Property: Date Entered 
1B 24 


-~ FF SIC MD5 DOCUMENTS 


#1 - CART OWNED SFAGATE HARD D NUMBER b3 
Dror WORING COPY IMAGE OF b6 
b7c 


Barcode: E4676786 Location: ECR 1 06/08/2011 


Case Number: 

Owning Office: SACRAMENTO b3 
b6 
b7C 
b7E 


FILE COPY sup wa) | 


06/15/11 
16:50:02 


FD-192 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


06/08/2011 


Anticipated Disposi 
RETURN 


SA 


SACRAMENTO 


i Ea) 


Description of Property: 


1B 25 


= ART OWNED SEAGATE 750 GB HARD DRI 
CONTAINING BEST EVIDENCE IMAGE OF 


2 - CASE NOTES: 


INTAKE WORKSHEET 


#3 - ACCESSDATA FTK IMAGER REPORT 


Barcode: E4765757 


Case Number: - 
Owning Office: 


FILE GUEY 


Location: ECR 1 


ICMIPRO1 
Page 


Source from which Property Acquired: 
SACRAMENTO CART LAB 


Case raat 


Date Entered 


Ss nai a 


06/15/2011 


b6 
b7C 


06/15/11 ® ICMIPRO1L 
16:50:06 FD-192 Page 1 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
sal) SACRAMENTO CART LAB 


06/15/2011 
SACRAMENTO BS 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: : Date Entered 
1B 26 
#1 - ONE CART OWNED SEAGATE 750GB HARD DRIVE, SERIAL NUMBER b3 
eee WORKING COPY IMAGE a eas b6 
2 - ACCESSDATA FTK IMAGER REPORT b7c 
Barcode: E4765758 Location: ECR 1 06/15/2011 


Case Number: | b3 
Owning Office: b6 
b7C 

b7E 


FILE COPY supv.wmian |_| 


@ . 


14:07:16 FD-192 


07/05/11 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from which Property Acquired: 


06/23/2011 


b6 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
FORFEIT Cd Cd 
Description of Property: Date Entered 
1B 29 
1. WHITE ASUS NETOOK, NO S/N 
Barcode: E4288727 Location: ECC 07/05/2011 
Case Number: - 
Owning Office: OMAHA BIC 
FILE COPY b7E 
PACKAGE COPY— 


eee oe CLPY 
FORFEITURE GOP 
AGENT WORK COPY— 
DUPLICATE FILE 


ICMIPROL 
Page 1 


07/05/11 : 
14:08:42 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: 


Description of Property: 


1B 30 
2. WHITE ASUS NETBOOK, s/s[ sw CARD 
Barcode: E4288728 Location: ECC 


ich Property Acquired: 


ICMIPROL 
Page 1 


b7c 


Date Entered 


b6 

b7C 

b7E 
07/05/2011 


=—— Gage Nanber | a 
Case Number: b6 
Owning Office: 7 


bTE 


ee: ICMIPRO1L 


07/05/11 
15:44:09 : Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


06/23/2011 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 31 b6 
b7C 
3. up taptor, s/s[_ wens corn | or 


Barcode: E4288729 Location: ECC 07/05/2011 


Case Number: | b3 
Owning Office: bé6 
FILE CORY b7C 
PACKAGE COPY__ ie 
FORFEITURE COPY_ | | 

AGENT WORK COPY 
DUPLICATE FILE 


07/05/11 
15:44:12 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: 


Description of Property: 
1B 32 


4. IBM TRAVELSTAR DRIVE, ssf 


Barcode: E4288730 Location: ECC 


b3 
Case Number: | bé 
Owning Office: i 


FILE Ce XK TR 

a EP egy xe 
MAAC COPY ¥ 
PORFE TURE all RY 
AGENT WORK OST 
mm: IPLICATE rit oan 


ICMIPRO1 
Page 1 


ich Property Acquired: 


Date Entered 


b6 
b7Cc 
bT7E 


07/05/2011 


b7E 


‘ : & ® 


07/05/11 ICMIPRO1 
15:44:16 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from which Property Acquired: 


06/23/2011 
Anticipated Disposition: Acquired By: : 
b7Cc 
Description of Property: Date Entered >7E 
1B 33 
5. SAMSUNG HARD DRIVE, sf 
Barcode: £4288731 Location: ECC | 07/05/2011 
b3 
Case Number: b6 
Owning Office: OMAHA b7C 
b7E 
ee Copy KK 
gia oe roy, 
URAC CO “S 
YREEIT DC oy 


07/05/11 ICMIPRO1 
15:44:21 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 . b6 
b7C 
Anticipated Disposition: Acquired By: se Agent: 
Description of Property: Date Entered 
iB 34 
6. OPTIMA ATTACHI FLASH DRIVE 
Barcode: E4288732 Location: ECC 07/05/2011 
b3 
b6 
b7C 
b7E 
Case Number: 


Owning Officem OMAHA 


07/05/11 ICMIPROL 
15:44:28 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source f which Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: Case Agent: 


: b7c 
Description of Property: Date Entered b7E 
1B 35 


7. SONY ERICSSON CELL PHONE, s/s WITH SIM CARD 


Barcode: E4288733 Location: ECC 07/05/2011 


Case Number: 
Owning Office: OMAHA 


FILE COPY, =RS 
PACKAGE COPY. 
FORFEITURE COPY. 
AGENT WORK COPY. 
DUPLICATE FILE. 


ICMIPRO1L 


07/05/11 
15:44:32 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: _So which Property Acquired: 
06/23/2011 
b6 
Anticipated Disposition: Acquired By: : b7c 
Description of Property: Date Entered 
1B 36 
9. SONY DRIVE, MODEL #MPF920-F 
Barcode: E4288734 Location: ECC 07/05/2011 
; b3 | 
b6 
b7c 
Case Number 4 b7E 
Owning Office: 
FILE COPY.K 5 
PACKAGE COPY... 


FORFEITURE COPY... 
AGENT WORK COPY... 
MUPLICATE FILE 


ICMIPRO1 


Page 1 


07/05/11 
15:44:45 FD-192 
Title and Character of Case: 
ANONYMOUS 
ich Property Acquired: 


Date Property Acquired: 
bé6 


06/23/2011 
Acquired By: : 
b7E 
; Date Entered 


Anticipated Disposition: 
FORFEIT 


Description of Property: 


1B 37 
07/05/2011 


Location: ECC 


Barcode: H4288735 


b3 
b6 
b7C 
b7E 


Case Number: 
Owning Office: OMAHA 


“ILE copy X es 
JACKAGE corr_ 
FORFEITURE Copy 
AGENT WORK Copy” 
DUPLICATE FILE. 


07/05/11 . ICMIPRO1 
15:44:50 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


06/23/2011 
Anticipated Disposition: Acquired By: e A : 
b7c 
Date Entered »7= 


Description of Property: 


1B 38 
11. MAXTOR HARD DRIVE, s/f 
Barcode: fsazse736 Location: ECC 07/05/2011 
b3 
b6 
b7C 
Case Number: b7E 


Owning Office: OMAHA 


Fer copy lk “SS 
Pati Qe CoP Y “- 
PURE STORE COPY 
AGENT WORK COPY_. 
NUPLICATE FILE, 


07/05/11 TCMIPRO1 
15:44:53 FD-192 . Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Sour fr which Property Acquired: 


06/23/2011 bé 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 39 


8. BOOK TITLED "CYBERACTIVISM" 


Barcode: E4288737 Location: ECC 07/05/2011 
b3 
bé6 
Case Number: bie 
b7E 


Owning Office: OMAHA 


boar weet " 
i ra oe ‘te x renters 
Sem 


07/05/11 ICMIPRO1 
15:45:18 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: ich Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: Case Agent: 


Description of Property: Date Entered 
1B 40 j 


23. ORANGE SPIRAL NOTEBOOK 


Barcode: F4288738 Location: ECC 07/05/2011 

Case Number: a 

Owning Office: OMAHA b7C 

Aes bTUE 

rive copy ce: 
PACKAGE COPY.- 
FORFEITURE COPY. 
AGENT WORK COPY 


DUPLICATE FILE — 


07/05/11 ICMIPRO1 
15:45:22 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 b6 
b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 41 
bé 
b7E 
Barcode: E4288739 Location: ECC 07/05/2011 
Case Number: b3 
Owning Office: OMAHA b6 
: b7C 
FILE. copy. bye 
P ites | 
FORFENTURE COPE | 
AGENT WORK * | 


DUPLICATE FILE — 


ICMIPRO1L 


07/05/11 
15:45:25 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: ich Property Acquired: he 
06/23/2011 b7C 
Anticipated Disposition: Acguired By: : 
Description of Property: Date Entered 
1B 42 
AND DOCUMENTS 
b7E 
Barcode: E4288742 Location: ECC 07/05/2011 


i 
. Case Number: b6 
b7C 


Owning Office: OMAHA 
b7E 


FILE COPY e 
PACKAGE COPY__ | 
FORFEITURE COPY_. 
AGENT WORK COPY. 
NUPLICATE FILE _ 


07/05/11 ICMIPRO1 
15:45:30 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


06/23/2011 
Anticipated Disposition: Acquired By: se Agent: 
: b7C 
Description of Property: , Date Entered °75 
1B 43 ; 
12. SEAGATE HARD DRIVE, s/n[ 
Barcode: EB4288743 Location: ECC 07/05/2011 
b3 
b6 
b7C 
Case Number: b7E 


Owning Office: OMAHA 


rie COPYE, aie: 
Pp Ce Ale COPY 
FORFESTURE COFY— 
AGENT WOkK COPY. 
DUPLICATE FILE 


07/05/11 ICMIPRO1 
15:45:32 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
b6é 
06/23/2011 Rue 
b7E 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 44 
13. MAXTOR HARD DRIVE, ssf 
Barcode: E4288744 Location: ECC 07/05/2011 


b3 
Case Number: | b6 
Owning Office: p7c 


bTE 


HILE copyK. 
PACKAGE COPY. 
FORFEITURE COPY. 
AGENT WORK COPY. 
NUPLICATE FILE 


ICMIPRO1 


07/05/11 


15:45:36 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: ur ich Property Acquired: re 
06/23/2011 Bee 
Anticipated Disposition: Acquired By: : 
Date Entered 


Description of Property: 
1B 45 


14. UNLABELED HARD DRIVE 


Barcode: F4288745 Location: ECC 07/05/2011 


Case Number: b6 
Owning Office: Bie 
b7E 


ravk curv “5 
PACKAGE COPY 
FORFEITURE COPY. 
AGENT WORK COPY. 
DUPLICATE FILE _. 


07/05/11 ICMIPROL 
15:45:39 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: Source from which Property Acquired: 
06/23/2011 . 
Anticipated Disposition: Acquired By: : ee 
b7C 
Description of Property: Date Entered °7= 
1B 46 
15. SEAGATE HARD DRIVE, s/| 
Barcode: E4288746 Location: ECC 07/05/2011 


b3 

Case Number: b6 
Owning Office: OMAHA pyc 
b7E 


ruecoryX 7g 
PACKAGE COPY OT 
| ORFEIT URE COPY. 
AGENT WORK CUPY_. 
DUPLICATE FILE. 


07/05/11 ICMIPRO1 
15:45:42 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 
Anticipated Disposition: Acquired By: : 
a a et 
Description of Property: Date Entered 75 
1B 47 
16. SEAGATE HARD DRIVE, s/s[_ | 
Barcode: E4288747 Location: ECC 07/05/2011 
Case Number: b3 
Owning Office: OMAHA b6 
b7C 
ss b7E 
rt Pete ag ree 
PL ve, 
e ‘ Ln rn 
ity Pace 


a wl : di Pies. 


07/05/11 ICMIPRO1 
15:45:46 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: which Property Acquired: 


06/23/2011 


Anticipated Disposition: j : Case Agent: 
FORFEI? Eas be 


Description of Property: | “Date Entered }7E 
1B 48 : 


17. QUANTUM HARD Drive, s/u[ 1] 


Barcode: E4288748 Location: ECC 07/05/2011 


Case Number: b3 
Owning Office: OMAHA . bé — 
b7C 

b7E 


07/05/11 ‘ ICMIPROL 
15:45:55 Page 1 
Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: Case Agent: 
b7C 
Description of Property: Date Entered b7E 
1B 49 


18. FUJITSU HARD DRIVE, sf 


Barcode: E4288749 Location: ECC 07/05/2011 


Case Number: Se 
Owning Office: eae 
FILE CopyX ee 
PACKAGE COPY__ 
FORFEITURE COPY. | | 
AGENT WORK COPY__ 
DUPLICATE FILE 


ICMIPRO1 


07/05/11 
Page 1 


15:45:58 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: ich Property Acquired: 


06/23/2011 ine 
; b7C 


Anticipated Disposition: Acquired By: Case Agent: 


Description of Property: Date Entered 


1B 50 


19. SAMSUNG MICRO SD CARD 2 GB 


Barcode: E4288750 Location: ECC 07/05/2011 
Case Number: b3 
Owning Office: OMAHA b6é 
b7C 
, b7E 


rite Curry 
PACKAGE COPY _. 
FORFERCURE COPY 
AGT WOR COPY 
DUPLICATE FILE 


07/05/11 ICMIPRO1 
15:46:02 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: Property Acquired: 
06/23/2011 
Anticipated Disposition: Acquired By: Case Agent: 
b7c 
Description of Property: Date Entered b7rE 
1B 51 
20. GATEWAY CPU TOWER, s/s[ 
Barcode: E4288751 Location: ECC 07/05/2011 
b3 
b6 
Case Number: : b7C 
b7E 


Owning Office: OMAHA 


Fin COPY 
| PACKAGE COPY__. 
| FORFEITURE COPY 
AGENT WORK COPY. 
DUPLICATE FILE 


07/05/11 


ICMIPRO1 
15:46:19 


Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: ich Property Acquired: 


06/23/2011 


Anticipated Disposition: Acquired By: : be 
b7C 
Description of Property: Date Entered »75 


1B 52 


21. WD HARD DRIVE, ssf 


Barcode: #4288752 Location: ECC 07/05/2011 


moors (ape Numbers... sl\p ne 
Owning Office: OMAHA b7Cc 
. b7E 

FILE cory 


RSet A SS 
PO “OF ue 
ft ty he ET oo hey ; 
Pwd Ub Ory. 


AQT Worry, Cet 


OUPLICATE FILE. 


07/05/11 ICMIPROL 
15:46:22 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: st 
06/23/2011 Bee 
Anticipated Disposition: Acquired By: nt: 
Description of Property: Date Entered 
1B 53 


22. BOOST MOBILE CELL PHONE, MODEL # SCP6760 


Barcode: #4288753 Location: ECC 07/05/2011 


Case Number: pe 

Owning Office: — Pe! 
FILE COPY XK, “ 
PACKAGE COPY. 4 


b7E 
FORFEITURE COPY. 
AGENT WORK COPY_. 


DUPLICATE FILE _ 


07/05/11 ICMIPRO1 
15:46:30 Page 


1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


b6 
06/23/2011 b7C 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 54 
24. SONY MEMORY STICK DUO 
Barcode: EH4288754 Location: ECC 07/05/2011 
b3 
Case Number: | b6 
Owning Office: b7c 
; b7E 
Fie coryX | 


PaCKAGE CURT 
PORFEM URE COPY 
AGENT Wks COM 


DUPLICATE FILE. 


07/05/11 
15:46:33 


Title and Character of Case: 


ANONYMOUS 


ICMIPRO1 


Page 1 


FD-192 


ich Property Required: 


Date Property Acquired: 


06/23/2011 
b6 


FORFEIT 


Anticipated Disposition: Acquired By: Case Agent: 
| b7c 
— b7E 
; Date Entered 


Description of Property: 


15°55 
27. HITACHI HARD DRIVE, s/sf | | 
07/05/2011 


Location: ECC 


Barcode: E4288755 


b3 
b6 
b7C 
b7E 


Case Number: 
Owning Office: OMAHA 


FILE copy ¥ s.5e 
PACKAGE COPY. 

FORFEITURE Copy 

AGENT WORK Copy 

DUPLICATE Fite 


? & @ 


07/05/11 ICMIPRO1 
15:46:37 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: _Source from which Property Acquired: 


06/23/2011 
Anticipated Disposition: Acquired By: Case Agent: ae 
Description of Property: Date Entered 
1B 56 
28. SAMSUNG HARD DRIvE, S/n[ | 
Barcode: E4288756 Location: ECC 07/05/2011 
b3 
Case Number: | b6 
Owning Office: OMAHA b7C 
b7E 
FI LE COPY m | 
PACKAGE COPY. | 
FORFEITURE COPY... 
AGENT WORK COPY... | 
DUPLICATE FILE 


07/05/11 ICMIPROL 
15:46:39 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 


06/23/2011 
b6 


Anticipated Disposition: Acquired By: ; : b7c 


Description of Property: Date Entered 


1B 57 
29. WD EXTERNAL HARD DRIVE, s/sf WITH CORDS 
Barcode: E4288757 Location: ECC 07/05/2011 


Case Number: | b3 
Owning Office: b6 
b7C 


FILE COPY 

PACKAGE COPY. 
FORFEITURE COPY. 
AGENT WORK COPY. 
DUPLICATE FILE _ 


ICMIPRO1 
Page 1 


FD-192 


07/05/11 
15:46:48 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: Source from which Property Acquired: 
06/23/2011 
a ee ee ee a Ee «| 
Anticipated Disposition: Acquired By: Cage Agent: b7c 
Date Entered 


Description of Property: 


1B 58 
30. TOSHIBA LAPTOP, s/n[ | WITH CORD 
07/05/2011 


Location: ECC 


Barcode: #4288758 


b3 
b6 


Case Number: | bic 
Owning Office: b7E 


rane CUPYX ot 
PACKAGE COPY 
FORFENMURE COPY 
AGENT WORK cop 
DUPLICATE Fine. 


07/05/11 ICMIPRO1 
15:46:52 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 
b6 
Anticipated Disposition: Acquired By: Case Agent: ats 
Description of Property: , : "Date Entered 
1B 59 
32. SAN DISSK CRUZER 4GB FLASH DRIVE, GREEN IN COLOR 
Barcode: E4288759 Location: ECC 07/05/2011 
b3 
Case Number: ee 
Owning Office: OMAHA ae 


FILE COPY K ee 


ue 4 noe cory mee 
eras TURE COPY — 

wae NT VW OR” f we - 
SYPLICATE CLE wee 


Poet 


ICMIPRO1 


07/05/11 


15:46:59 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
b6 
06/23/2011 Bi 
Anticipated Disposition: Acquired By: Case Agent: 
Description of Property: Date Entered 
1B 60 
33. SANDISK CRUSZER 8 GB FLASH DRIVE, BLACK IN COLOR 
Barcode: EH4288760 Location: ECC 07/05/2011 
b3 
b6 
b7C 
Case Number: b7E 


Owning Office: OMAHA 


FILE COPY.X 
PACKAGE COPY... 
FORFEITURE COPY... 
AGENT WORK COPY... 
DUPLICATE FILE. 


07/05/11 ICMIPRO1 
15:47:07 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: hich Property Acquired: 
06/23/2011 b6 
‘ b7C 
Anticipated Disposition: Acquired B : 
Description of Property: Date Entered 
1B 61 
34. NIPRNET FLASH DRIVE 
Barcode: E4288761 Location: ECC 07/05/2011 
b3 
b6 
b7C 
Case Number: b7E 
Owning Office: 
rive coPYA 
PRC MAGE COPY 
potter Gt 


AGENT DUES SES 


DUPLICATE PYLE ane 


07/05/11 ICMIPRO1 
15:47:10 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 
Anticipated Disposition: Acquired By: : a 
b7E 
Description of Property: Date Entered 
1B 62 ; 
35. IPAD 16 GB, S/n[_ sd WITH CASE 
Barcode: E4288762 Location: ECC . 07/05/2011 
| 
b3 
b6 
b7C 
Case Number: b7E 


Owning Office: OMAHA 


FILE COPY. 
PACKAGE COPY. 
FORFEITURE COPY .- 
AGENT WORK COPY... 
NUPLICATE FILE. 


07/05/11 ICMIPRO1 


15:47:14 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: ich Property Acquired: 
06/23/2011 | 
bé 
Anticipated Disposition: Acquired By: H b7E 
Description of Property: Date Entered 
1B 63 
36. HP LAPTOP, rl WITH CONNECTED EXTERNAL DVD 
DRIVE (CONTAINS DVD), WITH CORD 
Barcode: E4288763 Location: ECC 07/05/2011 
b3 


b6 


Case Number: ns o¥ | 
b7E 


Owning Office: OMAHA 


e + ig at My 
; eS re eK bg | | 
ae ok _ f ri 


07/05/11 ICMIPRO1 
15:47:17 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 
Date Property Acquired: _Source from which Property Acquired: 
06/23/2011 
Anticipated Disposition: ns = ai ako we 
FORFEIT pyc 
SO or bE 
Description of Property: Date Entered 
1B 64 
37. SEAGATE HARD DRIVE FROM ALLENWARE CPU, s/x[ | 
Barcode: #4288764 Location: ECC 07/05/2011 
b3 
b6é 
b7c 
b7E 
Case Number: 


Owning Office: OMAHA 


FILE COPYX 
PACKAGE COPY 
FORFEITURE COPY. - 
AGENT WORK COPY 
DUPLICATE FILE — 


07/05/11 


ICMIPROL 
15:47:21 FD-192 Page 1 
Title and Character of Case: 
ANONYMOUS 


Date Property Acquired: 


Source from which Property Acquired: 
06/23/2011 


Anticipated Disposition: 


Acquired By: Case Agent: 


b6 

b7C 

Description of Property: 
1B 65 


Date Entered >’E 


38. SEAGATE HARD DRIVE FROM ALIENWARE CPU, s/s[ | 


Barcode: E4288766 Location: ECC 


07/05/2011 
b3 
b6 

——case Number: | ee 
Case Number: 
Owning Office: rire 
FILE COPY. 
PACKAGE COPY—- 
FORFEITURE COPY 
AGENT WORK COPY. 


PHPLIGATE FILE sn 


07/05/11 ICMIPRO1L 
15:47:26 FD-192 Page 1 


Title and Character of Case: 


N 


ANONYMOUS 


Date Property Acquired: _Source from which Property Required: 


06/23/2011 
Anticipated Disposition: Acquired By: Case Agent: bs 
b7E 
Description of Property: Date Entered 
1B 66 
39. WD HARD DRIVE FROM ALIENWARE CPU, suf 
Barcode: E4288767 Location: ECC 07/05/2011 


b3 
Case Number: b6 | 
Owning Office: b7C 
b7E 


FILE COPYX 
PACKAGE COPY. 
FORFEITURE COPY_. 
AGENT WORK COPY... 
MUPLICATE FILE. 


07/26/11 
13:59:39 


6 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: 
07/21/2011 

Anticipated Disposition: 
DESTROY 


Description of Property: 
1B 67 


ICMIPRO1 
FD-192 Page 1 
Source £rom Lech Pr ty Acquired: 
CART SA 
4500 ORANGE GROVE AVE se 


SACRAMENTO CA 95841 


Date Entered 


aaa a 


#1 CART HDD WD-WMAMR1496803 WITH IMAGE OF 1B56 
#2 CART HDD MAXTOR L30EMKMH WITH IMAGE OF 1B58 & CD W/PHOTOS 
#3 CART HDD SEAGATE 9VPC9KP8 WITH IMAGE OF 1B63 & CD W/PHOTO 


Barcode: E4676807 


Case Number: 
Owning Office: 


Location: ECR 1 


SACRAMENTO 


07/21/2011 


b3 
be 
b7Cc 
b7E 


supv.wnma, | 


07/26/11 ICMIPROL 
14:04:19 ; Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: Source j ty Acquired: 
CART SA BG 
07/21/2011 4500 ORANGE GROVE AVE Bit 
SACRAMENTO CA 95841 
Anticipated Disposition: A j : Case Agent:. 
DESTROY [eed 
Description of Property: Date Entered 
1B 68 
#1 FBI CART HDD NING IMAGE OF 1B65 bIE 
#2 FBI CART HDD ONTAINING IMAGE FO 1B51 
#3 FBI CART HDD (ONTAINING IMAGES 1B50, 59, 60, 


1B61, 1B34 AND 


Barcode: E4676806 Location: ECR 1 07/22/2011 


FILE CABY SUPY INL] | 


O77 277/14. e @ ICMIPRO1 
17:03:16 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 
Date Property Acquired: Source from which Property Acquired: 

cart sat be 

07/26/2011 4500 ORANGE GROVE AVENUE ad 


SACRAMENTO CA 95841 


Anticipated Disposition: Acquired By: Case Agent: 


Description of Property: Date Entered 
1B 69 


#1 FBI HDD SEAGATE 9VPC3EGY CONTAINS IMAGE OF 1B52 
#2 FBI HDD SEAGATE 6VMBTHPK CONTAINS IMAGE OF 1B30 
FBI HDD SEAGATE 6VMBT7TX CONTAINS CLONE OF 1830 


CDR CONTAINING ge Biss 
#3 FBI HDD WESTERN DIGITA CONTAINS mace | 
CD-R CONTAINS PHOTOGRAPHS OF 1B29 
#4 FBI HDDL_——s————C.« CONTAINS IMAGE OF 1343. INCLUDES 
A CD-R WITH PHOTOGRAPHS OF 1B43 


#5 FBI HDD SEAGATE 9VSOXROM CONTAINS IMAGE OF 1B57 


Barcode: E4765869 Location: ECR 1 07/26/2011 
| 
Case Number: b3 
Owning Office: SACRAMENTO b6 


b7C 
b7E 


suev.wmal| | 


FILE GUPY 


09/30/11 ICMIPRO1 
19:31:58 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
SILICON VALLEY RCFL 


09/16/2011 
CA 
Anticipated Disposition: A j : : 
DESTROY b6 
b7C 
Description of Property: Date Entered 
1B 70 
1 - SVE033811, SEAGATE BARRACUDA 500GB 7200.12 HDD, S/N: b3 
CONTAINING DD IMAGES OF[—‘“‘CSOC‘*S@CS b6 


2 - SVE033812, SEAGATE BARRACUDA _500GB 7200.12 HDD, S/N b7C 
CONTAINING DD IMAGES OF[—“‘C‘CS™SCS*Cs‘s*@YS b7E 


ED IN PLASTIC HEAT SEALED BAG, SV-11-0129) 


Barcode: E4809060 Location: ECR 1 09/30/2011 
Case Number: b3 
Owning Office: SACRAMENTO bé 


b7C 


CHE PRY suev.wma{ 


ICMIPRO1 
19:32:01 FD-192 Page 1 


09/30/11 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
SILICON VALLEY RCFL 


09/16/2011 
CA 
Anticipated Disposition: Acquired By: += + Case Agent: 
DESTROY poe = Cd bs 
bat ee ee a Fr Se ee ea 
Description of Property: Date Entered 
1B 71 
#1 - SVE033853, SEAGATE s/n{ b6 
CONTAINING E01 IMAGES OF b7C 
bTE 


(CONTAINED IN PLASTIC HEAT SEALED BAG, MARKED SV-11-0129, 
SVE033852, SVE033853) 


Barcode: E4809061 Location: ECR 1 09/30/2011 


Case Number: | 
Owning Office: SACRAMENTO b6 


09/30/11 ® ICMIPRO1 


19:32:04 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
SILICON VALLEY RCFL 


09/16/2011 
CA 
Anticipated Disposition: _ Acquired By: Case Agent: 
b7Cc 

Description of Property: Date Entered 

1B. 72 

#1 - SVE034880, CD-R CONTAINING DERIVATIVE EVIDENCE (DE) b6 

RESULTS CD MADE BY[. sd b7C 

#2 - SVE034881, WESTERN DIGITAL GREEN 2TB HARD DRIVE MDL: bTE 

WD20EARS, 8: oe oN TaINING IMAGES FOR BOTH LVM 

DISK IMAGES, A ILES FOR 1B15 AND THE LVM 

Barcode: F4809062 Location: ECR 1 09/30/2011 


03/26/12 - ICMIPRO1 
Les01 <07 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
FBI CART LABORATORY 
02/21/2012 4500 ORANGE GROVE AVE 
SACRAMENTO CA 95841 


Anticipated Disposition: Acquired By: Case Agent: 


Description of Property: Date Entered be 
1B 73 b7C 
b7E 


#1 FBI CART SUPPLIED HDD CONTAINING_IMAGE AND FTK PROCESSING 
OF 1B37. DRIVE SERIAL NUMBER IS 


Barcode: E4675505 Location: ECR 1 02/21/2012 


Case Number: | 


Owning Office: SACRAMENTO b3 
b6é 


b7C 
b7E 


SUPV. INITIAL 


® ° 


10:58:38 FD-192 


05/29/12 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: 
EVIDENCE ITEM[__}APPLE IPAD 
05/25/2012 


Anticipated Disposition: By: 
DESTROY 


Description of Property: 
1B 74 


CART DVD+R OPTICAL DISK CONTAINING IMAGE PROCESSING / 
RESULTS OF EXAMINATION OF EVIDENCE ITEM APPLE IPAD 


Barcode: E4878031 Location: ECR 1 


Case Number: 
Owning Office: SACRAMENTO 


re i Supv.INTAL| | 


Date Entered 


05/25/2012 


ICMIPRO1L 


Page 


1 


b3 
b6 
b7c 
b7E 


b7E 


b3 
b6 
b7C 
bT7E 


é ° 


10/19/11 ICMIPRO1 
15:45:50 FD-192 Page 1 


Title and Character of Case: 


ANONYMOUS 


Date Property Acquired: Source from which Property Acquired: , 
CONSENTING PARTY 
10/18/2011 


Anticipated Disposition: Acquired Bye Case aaent : 
pe of Property: Date Entered 
| , b3 


b6 
10/18/2011 (Cc . b7C 
TELCAL BET SAI b7E 


SOURCE = TELEPHONIC 


Barcode: E03138451 Location: ELSURVAULT 10/19/2011 


Case Number: | 
Owning Office: ; ; 63 
b6 
b7C 


bT7E 


SUPV. INITIAL 


FILE COPY es ae | | 


~~ 


To: 
Ce: 


Subject: EndGame Sysiems - Possible Target of Anon 


FYI ~ 


We received a telephone call earlier today from an Atlanta-based company named EndGame Systems, which does work 
in the infosec/malware area, along with doing cleared contract work. 


Some of their proprietary and confidential information was among the data that was released through the HBGary 
compromise associated with Anonymous. EndGame has a strong belief that as a result of the released information that 


they will be targeted by Anonymous in some fashion. 


If you guys run across any intel regarding activity directed towards EndGame Systems, please let either myself of | 
now. Similarly, if we develop any further information, we'll pass it along. 


. b6 
Thanks! . . b7c 


Special Agent 
seamen! : 
anta Fle ice bic 


b7E 


SM GAMES: bs 
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FEDERAL BUREAU OF INVESTIGATION 


Investigation on 02/07/2011 a Sacramento 
File 
by 


This document contains neither recommendations nor conclusions of the FBI. 
it and its contents are not to be distributed outside your agency. 


1 at approximately 4:30 
obile telephone 
contacted SA 


Date of transcription 02/07/2011 


b6é 
b7¢ 


b6 
b7Cc 


b3 
b6 
b7c 
b7E 


It is the property of the FBI and is loaned to your agency; 


To: 


Cc: 
Subject: 


=a HBGary contacted Infragard coordinator 
SA o) 


by the group Anonymous. Specifically, the following have been hacked: 


n 02/06/2011 to advise that his company had been packed 


Two servers running Linux and the Google e-mail accounts for all 


employees. 


By way of background, 
There is 


California. 


a en that HBGary is based in Sacramento 
also a company called HBGary Federal which was 


created 2 years ago by HBGary to facilitate contracts with the federal 
HBGary Federal does classified work for United States 


Government a including DOD, CIA, and NSA. 


Some time in the past, 


government. 


It appears that members 


of the group became aware of this and attacked HBGary as a form of 


revenge. 


Anonymous compromised 


contents. 


to all of HBGary's e-mal 


Since 


(Gmail) and downloaded the 
the group gained access 
contents therein. The group also 


accounts an 


compromised 2 servers. The servers did not contain any classified 
material nor source code for HBGary's main product, however they may have 
contained customer data which was sensitive in nature. Likewise, the e- 
mail contents did not contain any classified material but may have 
contained snippets of source code, and customer data which was sensitive 


in nature. 


On the afternoon of 02/06/2011, 


learned that the information which 


has been exfiltrated was being made available on the Internet via a 
website called "thepiratebay.com." The information was also available via 


a torrent download. 


HBGary employees were reviewing the material 


available on and had identified at least 3 e-mail accounts which were 


placed online including that of 


another employee of HBGary 


Federal, and an employee in the Sacramento office of HBGary who was 


b6 
b7C 


b6 
b7C 


b6 
b7C 


b6 
b7C 


b7E 


was distraught by this event and feared for the repercussions it 
would have for his company insomuch as sensitive customer data have been 
potentially stolen and could cause HBGary to lose the trust of its 
customers. It was the intent sq Ike contact his attorneys and 
attempt a civil action against the leaders of Anonymous. 
identified 


asked the writer if 


the FBI could place an immediate telephone call to 
not post HBGary's sensitive data online. The writer replied this probably 
would not be an effective strategy to mitigate the damage; in any case, 
the FBI was not in a position to make such a call. 


will meet with the Washington Field Office (WFO) Cyber Squad on 


02/07/2011 to discuss the above. was advised that agents from the 
Sacramento office of the FBI would meet with him on the same date at 
9:00AM PST. 


With regard to the people conducting the investigation at HBGary, writer 
advised to inform them to begin keeping a running diary of all the 
steps they were taking. He was told they needed to keep good notes of 
what they were doing and be prepared to discuss this with the FBI 
investigators. 


b6 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/08/2011 
To: Sacramento 
From: Sacramento 


Squad CY-1 
Contact: 


SA 
Approved By: 


Drafted By: 


Case ID #: 
Title: Un 
ANONYMOUS ; 


HBGARY - VICTIM; 
CI - CRIMINAL 


a 


Synopsis: To claim statistical accomplishment for InfraGard 
member reporting. ‘ 


Details: Captioned investigation was opened as a result of 
InfraGard member reporting. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/08/2011 
To: Sacramento 
From: Sacramento 
Squad CY-1 
Contact: SA 
Approved By 
Drafted By: 
Case ID #: 
Title: Uns 
ANONYMOUS ; 
HBGARY - VICTIM; 
CI - CRIMINAL 


Synopsis: To claim statistical accomplishment for InfraGard 
member reporting. 


Details: Captioned investigation was opened as a result of 
InfraGard member reporting. 


New Version 


b3 


UNCLASSIFIED bIE 


; 


Automated Serial Permanent Charge-Out 
FD-5a (1-5-94) 
Date: 02/15/11 Time: 14:09 


b7E 


Description of Document: 


Type : OTHER 

Date : 02/07/11 

To : SACRAMENTO 

From : SACRAMENTO 

Topic: ARTICLE: KREBS ON SECURITY-HBGARY FEDERAL HACKED BY ANONYMOU 


Reason for Permanent Charge-Out: 
TRANSFERRED TO A SUBFILE.... 


Transferred to: 
b3 


Case ID 
b6 
Employee: b7C 
Peery b7E 


b3 
bTE | 


® 


Automated Serial Permanent Charge-Out 
FD-5a (1-5-94) \ 
Date: 02/15/11 Time: 14:10 


: b3 
Case ID: bE 
Description of Document: 
Type : OTHER 
Date : 02/07/11 
To : SACRAMENTO 


From : SACRAMENTO 
Topic: ARTICLE: ANONYMOUS ATTACKS HBGARY FEDERAL, STEALS CORPORATE 


Reason for Permanent Charge-Out: 
TRANSFERRED TO A SUBFILE 


Transferred to: 


Case ID b3 
b6 

Employee: bic 
aoe b7E 


b3 
b7E 
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internetsanon.jpg (JPEG Image, 1583x1546 "é 


lofl 


Baie 


This domain has been seized by Anonymous under section #14 of the rales of the Internet. 


Greetings HBGary (a computer “security” company), 


Your recent claims of “infiltrating” Anonymous amuse us, and so do your attempts at using Anonymous as a means to gam 
press attention for yourself. How's this for attention? 


You brought this upon yourself. You've tried to bite at the Anonymous hand, and now the Anonymous hand is bitch-slapp 
you in the face. You expected a counter-attack in the form of a verbal braul (as you so eloquently put it in one of your pris 
emails), but now you've received the full fury of Anonymous. We award you no points. 


What you seem to have failed to realize is that, just because you have the title and general appearence of a "security" 
company, you're nothing compared to Anonymous. You have little to no security knowledge. Your business thrives off 
charging ridiclous prices for simple things like NMAPs, and you don't deserve praise or even recognition as security expet 
And now you tum to Anonymous for fame and attention? You're a pathetic gathering of media-whoring money-grabbing 
sycophants who want to reel in business for your equally pathetic company. 


Let us teach you a lesson you'll never forget: you don't mess with Anonymous. You especially don't mess with Anonymout 
simply because you want to jump on a trend for public attention, which Aaron Barr admitted to in the following email: 


"But its not about them...its about our audience having the right impression of our capability and the competency 
our research. Anonymous will do what every they can to discredit that. and they have the mic so to speak because 
they are on Al Jazeeera, ABC, CNN, etc. Iam going to keep up the debate because I think it is good business but I 
will be smart about my public responses." 


You've clearly overlooked something very obvious here: we are everyone and we are no one. If you swing a sword of ma 
into Anonymous’ innards, we will simply engulf it. You cannot break us, you cannot harm us, even though you have clearly 
tried... 


You think you've gathered full names and home addresses of the "higher-ups” of Anonymous? You haven't. You think 
Anonymous has a founder and various co-founders? False. You believe that you can sell the information you've found to f 
FBI? False. Now, why is this one false? We've seen your internal documents, all of them, and do you know what we did? 
We laughed. Most of the information you've "extracted" is publicly available via‘our IRC networks. The personal details o: 
Anonymous "members" you think you've acquired are, quite simply, nonsense. 


So why can't you sell this information to the FBI like you intended? Because we're going to give it to them for free. Your 
gloriously fallacious work can be a wonder for all to scour, as will all of your private emails (more than 66,000 beauties fo 
the public to enjoy). Now as you're probably aware, Anonymous is quite serious when it comes to things like this, and 
usually we can elaborate gratuitously on our reasoning behind operations, but we will give you a simple explanation, becau 
you seem like primitive people: 


You have blindly charged into the Anonymous hive, a hive from which you've tried to steal honey. Did you think the bees 
would not defend it? Well here we are. You've angered the hive, and now you are being stung. 


It would appear that security experts are not expertly secured. 


We are Anonymous. 
We are legion. 

We do not forgive. 
We do not forget. 
Expect us - always. 


%7| Download HBGary email leaks 


seein ee eng ero 
: 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 02/09/2011 


On the morning of 02/07/2011 a meeting was held with 
representatives of HBGARY INC, 3604 Fair Oaks Blvd, Building B, 
Suite 250, Sacramento, CA 95864, telephone 916-459-4727, fax 
916-481-1460. After being advised of the identity of the 


interviewing agents and the purpose of the interview, the following 
information was provided: 


HBGARY INC. and HBGARY FEDERAL were both affected by 
recent computer intrusion activity allegedly conducted by member(s) 
of the group ANONYMOUS. Both companies were incorporated in the 
State of California and were located in the same building. Email 
services for both companies were provided by Google; email services 


for both companies were handled under a single corporate account. 
| | b6 
HBGARY FEDERAL was described as a subsidiary of HBGARY INC. b7c 
HBGARY INC. owned 15% of HBGARY EDERAL | 


b6 
b7C 


HBGARY FEDERAL's web-server in Colorado Springs was 
compromised by a SQL injection attack. The hacker(s) was then able 


to go through HBGARY FEDERAL's mail-spools for passwords. aad b6 
credentials were compromised, including his Google email accoun bic 


Investigation on 02/07/2011 at Sacramento, CA 


b3 
File b6 

a b7C 
by b7E 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. | | 
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Continuation of FD-302 of HBGary Inc. Management :On 02/07/2011 __, Page 2 


PO 


gince[_______________] for the. corporate 
Google email account, the other employee accounts were able to be 
compromised. The hacker(s) was able to change the other employees! 
passwords and then log into the accounts. Three email accounts 


were downloaded and al on ees The three email 


HBGARY provided a support server for customers, in order 
to receive support request tickets and uploads of memory captures 
and other forensic artifacts for review by HBGARY INC. analysts. 
The support server was located within a DMZ, but was compromised. 
HBGARY INC. technicians were able to lock out the intruders by 3:15 

y, 02/06/2011. The intrusion was first noticed by 
when he could no longer login to the server. At that 
time id not know about the other intrusion activity. 


In anticipation of a response by ANONYMOUS, HBGARY INC. 
employees applied all available patches to the server on Thursday, 
02/03/2011. However, they did not anticipate the use of account 
passwords made available when the HBGARY FEDERAL server containing 
the mail-spools were compromised. 


HBGARY INC. had two other internet facing web-sites, 
www.hbgary.com, and www.portal.hbgary.com. The servers hosting 
these web-sites were behind a software firewall. An IRC channel, 
named #OPHBGary, was created in order to discuss and coordinate the 
intrusion activity targeting HBGARY INC. and HBGARY FEDERAL. 


Discussions on this channel claimed to have compromised HBGARY's 
‘word presa". This lead to 
believe that the two web sites that utilized word press, 


www.hbgary.com and www.portal ..hbgary.com were compromised, but this 
had not been confirmed by HBGARY INC. technicians. 


[__hostea a web-site at the domain www.rootkit.com. 
The server hosting the web-site was also compromised. The server 
was physically co-located at the Sacramento facility where HBGARY's 


servers were located, but was not behin 
ANONYMOUS member_utilizing the handle 


email account. n 
www.rootkit.com via emai 
requesting access tO www.rootkKit.com and was a 


e to gain access. 
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Continuation of FD-302 of HBGary Inc. Management ,On 02/07/2011 Page _3_ 


Www.rootkit.com had over 80,000 user accounts stored. All of these 
“accounts were compromised. 


On 02/06/2011, 
journalist, telephone numbe 
a 


elieved however sh 


IRC channel to continue the di j logs of this 
conversation were recorded by and_ will be attached to 
i : nica 


The following HBGary Inc. representatives were present 
during the meeting: 


During the interview, the following documents (attached) 
were provided to the interviewing agents: 


Ls Copies of corporate documents for HB GARY FEDERAL L.L.Cc. 
2 [rote regarding ANONYMOUS. 
3. Internet relay chat logs from 
4. Chat log for_conversation between 
(alias for : 
5. Copies of faxes received by HBGARY on 02/06/2011, titled 


ANONYMOUS PRESS RELEASE. 
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LLC-1 } File # 


State of California 
Secretary of State 


ENDORSED - FILED 
@ Secre 
of the State of Callen ia 


DEC 1 5 2009 


LIMITED LIABILITY COMPANY 
ARTICLES OF ORGANIZATION 


A $70.00 filing fee must accompany this form. 
IMPORTANT — Read instructions before completing this form. 


ENTITY NAME (End the name with the words “Limited Liability Company,” or the abbreviations "LLC” or “L.L.C.” The words “Limited” and “Company” 
may be abbreviated to “Lid.” and “Co.,” respectively.) 


This Space For Filing Use Only 


1. NAME OF LIMITED LIABILITY COMPANY 
HB Gary Federal, LLC 


PURPOSE (The following statement is required by statute and should not be altered.) 


2. THE PURPOSE OF THE LIMITED LIABILITY COMPANY 1S TO ENGAGE IN ANY LAWFUL ACT OR ACTIVITY FOR WHICH A LIMITED LIABILITY 
COMPANY MAY BE ORGANIZED UNDER THE BEVERLY-KILLEA LIMITED LIABILITY COMPANY ACT. 


INITIAL AGENT FOR SERVICE OF PROCESS (if the agent is an individual, the agent must reside in Califomia and both Items 3 and 4 must be 
completed. {f the agent is a corporation, the agent must have on file with the Califomia Secretary of State a certificate pursuant to Corporations Code 
section 1505 and item 3 must be completed (leave Item 4 blank). 


3. NAME OF INITIAL AGENT FOR SERVICE OF PROCESS 
C. Angela De La Housaye 


IF AN INDIVIDUAL, ADDRESS OF INITIAL AGENT FOR SERVICE OF PROCESS IN CALIFORNIA = CITY STATE ZIP CODE 


1655 North Main Street, Suite 260 Wainut Creek CA 94596 


MANAGEMENT (Check only one) 


5. THE LIMITED LIABILITY COMPANY WILL BE MANAGED BY: 


4. 


[i ONE MANAGER 


MORE THAN ONE MANAGER 


Lj ALL LIMITED LIABILITY COMPANY MEMB<R(S) 


ADDITIONAL INFORMATION ; 


6. ADDITIONAL INFORMATION SET FORTH ON THE ATTACHED PAGES, IF ANY, IS INCORPORATED HEREIN BY THIS REFERENCE AND MADE A PART 
OF THIS CERTIFICATE. : 


EXECUTION. 


7. I DECLARE IAM THE PERSON WHO EXECUTED THIS INSTRUMENT, WHICH EXECUTION IS MY ACT AND DEED, 
December 15, 2009 OES 
Es ete 


APPROVED BY SECRETARY OF STATE 


Attackmant / 


LLC-1 (REV 04/2007) 
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State of California 
Secretary of State 


|, DEBRA BOWEN, Secretary of State of the State of California, 
hereby certify: 


That the attached transcript of \ page(s) is a full, true and 
correct copy of the original record in the custody of this office. 


IN WITNESS WHEREOF, | execute this 
certificate and affix the Great Seal of the State 
of California this day of 


DEBRA BOWEN 
Secretary of State 


ESS) OSP 09 113643 


Sec/State Form CE-109 (REV 07/2009) 


STATE OF CALIFORNIA ® NOTICE DATE: 06/16/10 
FRANCHISE TAX BOARD 


PO BOX 942857 593800210000 
SACRAMENTO CA 94257-0511 


0002009351100920000506161009++4++4+4+++90000004b2217 


LIMITED LIABILITY COMPANY - NOTICE OF BALANCE DUE 


C] Check this box and indicate new address on reverse. NOTICE NUMBER: 1065252100609 
HB GARY FEDERAL, LLC | ENTITY ID: SOSL 200935110092 
3604 FAIR OAKS BLVD STE 250 TAX YRCS) END: 12/709 


SACRAMENTO CA 95864-7264 
BALANCE DUE: $ 46.22 
PAYMENT DUE DATE: 07/01/10 


Return the above part with your payment. T 
Keep this part for your records. 


Entity ID: SOSL 200935110092 Payment Due Date: 07/01/10 


Your limited liability company's (LLC) account has a balance due. 


Baca of this notice lists the tax year, current balance due, and the payment due date. Refer to the following table for 
etails. 


Side 2 provides a summary balance for all amounts due from your LLC. 


We enclosed a Business Entity Refund/Billing-Information (FTB 1138) insert. It provides information regarding interest, 
penalties, and fees. 


If your LLC has unpaid liabilities for multiple tax years, it will receive separate notices for each one. Pay the balance 
due shown on the most recent tax year notice. 


FR FIT Par? 


$ 
LLC Annual Tax: : é 800.00 
Nonconsenting Nonresident Members’ Tax: : 
Tax Assessment: 
Penalties/Fees: 
MONTHLY PENALTY 4.00 
UNDERPAYMENT PENALTY 40.00 
Interest Due: 2.22 
Total Credits and Payments: 800.00 
Refunds/Inierest Allowed: 0.00 


| ‘| NEW LIABILITY BALANCE DUE: ) 


Please see Side 2 of this notice for additional information. 
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OPERATING AGREEMENT FOR 
HBGARY FEDERAL, LLC 


THIS OPERATING AGREEMENT (“Agreement”) is entered into as of January 10, 2010 
by and amon with a business address located 
at HBGary Federal, ; alr s Bivd., Suite acramento, California, 95864; HB 


G Inc... a Cali 


be 
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All of the Members shall be referred to collectively as “Members” 
and individually as “Member.” ‘ 


A. The Members have formed a limited liability company under the Beverly-Killea Limited 
Liability Company Act. The Articles of Organization of the Company filed with the California 
Secretary of State on December 15, 2009 are hereby adopted and approved by the Members. 


B. The Members enter into this Agreement to form and to provide for the governance of the 
Company and the conduct of its business, and to specify their relative rights and obligations. 


NOW THEREFORE, the Members agree as follows: 
ARTICLE I: DEFINITIONS 


Capitalized terms used in this Agreement have the meanings specified in this Article or 
elsewhere in this Agreement and when not so defined shall have the meanings set forth in 
California Corporations Code section 17001. 


1.1. “Act” means the Beverly-Killea Limited Liability Company Act California Corporations 
Code §§17000-17705), including amendments from time to time. 


1.2. “Affiliate” of a Member means (1) any Person directly or indirectly, through one or more 
intermediaries, controlling, controlled by, or under common control with the Member. The term 
“control” (including the terms “controlled by” and “under common control with”) means the 
possession, direct or indirect, of the power to direct or cause the direction of the management and 
policies of a Person, whether through membership, ownership of voting securities, by contract, or 
otherwise. 


1.3. “Agreement” means this operating agreement, as originally executed and as amended from 
time to time. 


1.4. “Articles of Organization” is defined in Corporations Code section 17001(b), as applied to mn 
this Company. =| 
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1.5. “Assignee” means a person who has acquired a Member’s Economic Interest in the 
Company, by way of a Transfer in accordance with the terms of this Agreement, but who has not 
become a Member. 


1.6. “Assigning Member” means a Member who, by means of a Transfer, has transferred an 
Economic Interest in the Company to an Assignee. 


1.7. “Available Cash” means all net revenues from the Company’s operations, including net 
proceeds from all sales, refinancings, and other dispositions of Company property that the 
Manager, in the Manager’s sole discretion, deems in excess of the amount reasonably necessary 
for the operating requirements of the Company, including debt reduction and Reserves. 


1.8. “Book Value” of an asset shall mean, as of any particular date, the value at which the 
asset is properly reflected on the books and records of the Company as of such date in accordance 
with Section 1.704-1(b)(2)(iv) of the Treasury Regulations. The Book Value of initial 
contributed capital (see Exhibit B) is its carryover basis. Carryover basis is defined as the 
adjusted basis of the asset in the hands of the Member prior to the contribution of the asset. To 
the extent a partnership takes a carryover basis in any "contributed intangible" (i.e., an intangible 
contributed to the partnership in a contribution to which IRC Section 721 applies), such 
carryover basis is amortizable only in the hands of the partnership if it was amortizable in the 
hands of the transferor. The partnership’s basis in the contributed property (inside basis) is 
equal to the contributing partner’s adjusted basis. IRC section 723. The contributing partner’s 
adjusted basis in its partnership interest is increased by the adjusted basis in the contributed 
property. Intangibles created by the contributing partner, as opposed to purchased intangibles, 
are not amortizable in the hands of the contributing partner. Therefore these intangibles’ book 
value is a carryover basis, that is, the adjusted basis in the hands of the contributing partner prior 
to contribution to the partnership. The Book Values of all Company assets shall be adjusted to 
equal their respective fair market values, as reasonably determined by the Members, as of the 
following times: (i) the acquisition of any additional interest in the Company by any new or 
existing Member in exchange for more than a de minimis Additional Capital Contribution; (ii) 
the distribution by the Company to a Member of more than a de minimis amount of Company 
assets, including money, if, as a result of such distribution, such Member’s interest in the 
Company is reduced; and (iii) the termination of the Company for Federal income tax purposes 
pursuant to Section 708(b)(1)(B) of the Code. 


1.9. “Capital Account” means, with respect to any Member, the account reflecting the capital 
interest of the Member in the Company, consisting of the Member’s initial Capital Contribution 
maintained and adjusted in accordance with Article IIL. 


1.10. “Capital Contribution” means, with respect to any Member, the amount of the money and 
the Fair Market Value of any property (other than money) contributed to the Company (net of 
liabilities secured by such contributed property that the Company is considered to assume or take 
“subject to” under IRC section 752) in consideration of a Percentage Interest held by such 
Member. A Capital Contribution shall not be deemed a loan. 
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1.11. “Capital Event” means a sale or disposition of any of the Company’s capital assets, the 
receipt of insurance and other proceeds derived from the involuntary conversion of Company 
property, the receipt of proceeds from a refinancing of Company property, or a similar event with 
respect to Company property or assets. 


1.12. “Code” or “IRC” means the Internal Revenue Code of 1986, as amended, and any 
successor provision. 


1.13. “Company” means the company named in Article II, Section 2.2 of this Agreement. 
1.14. “Corporations Code” (“Corp C”) means the California Corporations Code. 


1.15. “Depreciation” shall mean, for each Fiscal Year, an amount equal to the depreciation, 
amortization or other cost recovery deduction allowable with respect to an asset for such year or 
other period; provided, however, that if the Book Value of an asset differs from its adjusted basis 
for Federal income tax purposes at the beginning of any such year or other period, Depreciation 
shall be an amount that bears the same relationship to the Book Value of such asset as the 
depreciation, amortization, or other cost recovery deduction computed for tax purposes with 
respect to such asset for the applicable period bears to the adjusted tax basis of such asset at the 
beginning of such period, or if such asset has a zero adjusted tax basis, Depreciation shall be an 
amount determined under any reasonable method selected by the Members. 


1.16. “Economic Interest” means a Person’s right to share in the income, gains, losses, 
deductions, credit or similar items of, and to receive distributions from, the Company, but does 
not include any other rights of a Member, including the right to vote or to participate in 
management. 


1.17. “Encumber” means the act of creating or purporting to create an Encumbrance, whether 
or not perfected under applicable law. 


1.18. “Encumbrance” means, with respect to any Membership Interest, or any element thereof, 
a mortgage, pledge, security interest, lien, proxy coupled with an interest (other than as 
contemplated in this Agreement), option, or preferential right to purchase. 


1.19. “Gross Asset Value” means, with respect to any item of property of the Company, the 
item’s adjusted basis for federal income tax purposes, except as follows: 


(a) The initial Gross Asset Value of any item of property contributed by a Member to 
the Company shall be the fair market value of such property, as mutually agreed by the 
contributing Member and the Company; 


(b) The Gross Asset Value of any item of Company property distributed to any 
Member shall be the fair market value of such item of property on the date of distribution; and 
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(c) The Gross Asset Value of any item of Company property shall be subject to the 
adjustments specified in this Operating Agreement. 


1.20. “Initial Members” means those Persons whose names are set forth in the first sentence of 
this Agreement. A reference to an “Initial Member” means any of the Initial Members. 


1.21. “Involuntary Transfer” means, with respect to any Membership Interest, or any element 
thereof, any Transfer or Encumbrance, whether by operation of law, pursuant to court order, 
foreclosure of a security interest, execution of a judgment or other legal process, or otherwise, 
including a purported transfer to or from a trustee in bankruptcy, receiver, or assignee for the 
benefit of creditors. 


1.22. “Majority of Members” means a Member or Members whose Percentage Interests 
represent more than 50 percent of the Percentage Interests of all the Members. 


1.23. “Manager” or “Managers” means the Person(s) named as such in Article II or the Persons 
who from time to time succeed any Person as a manager and who, in either case, are serving at 
the relevant time as a Manager. 


1.24. “Member” means an Initial Member or a Person who otherwise acquires a Membership 
Interest, as permitted under this Agreement, and who remains a Member. 


1.25. “Membership Interest” means a Member’s rights in the Company, collectively, including 
the Member’s Economic Interest, any right to Vote or participate in management, and any right 
to information concerning the business and affairs of the Company. 


1.26. “Notice” means a written notice required or permitted under this Agreement. A notice 
shall be deemed given or sent when deposited, as certified mail or for overnight delivery, postage 
and fees prepaid, in the United States mails; when delivered to Federal Express, United Parcel 
Service, DHL WorldWide Express, or Airborne Express, for overnight delivery, charges prepaid 
or charged to the sender’s account; when personally delivered to the recipient; when transmitted 
by electronic means, and such transmission is electronically confirmed as having been 
successfully transmitted; or when delivered to the home or office of a recipient in the care of a 
person whom the sender has reason to believe will promptly communicate the notice to the 
recipient. 


1.27. “Percent of the Members” means the specified total of Percentage Interests of all the 
Members. 


1.28. “Percentage Interest” means a fraction, expressed as a percentage, the numerator of 
which is the total of a Member’s Capital Account and the denominator of which is the total of all 
Capital Accounts of all Members. ; 


1.29. “Person” means an individual, partnership, limited partnership, trust, estate, association, 
corporation, limited liability company, or other entity, whether domestic or foreign. 
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1.30. “Profit” and “Loss” shall mean, for each Fiscal Year, an amount equal to the Company’s 
taxable income or loss for such year or period, determined in accordance with Section 703(a) of 
the Code (provided that for this purpose, all items of income, gain, loss, or deduction required to 
be stated separately pursuant to Section 703(a)(1) of the Code shall be included in taxable 
income or loss), with the following adjustments: 


Qa) Any income of the Company that is exempt from Federal income tax and not 
otherwise taken into account in computing Profit or Loss pursuant to this provision shall be 
added to such taxable income or Loss; 


(ii) | Any expenditures of the Company described in Section 705(a)(2)(B) of the Code 
or treated as Code Section 705(a)(2)(B) expenditures pursuant to Section 1.704-1(b)(2)(iv)G) of 
the Treasury Regulations, and not otherwise taken into account in computing Profit or Loss 
pursuant to this provision, shall be subtracted from such taxable income or loss; 


(iii) | Book Gain or Book Loss from a Capital Transaction shall be taken into account in 
lieu of any tax gain or tax loss recognized by the Company by reason of such Capital 
Transaction; and 


(iv) In lieu of the depreciation, amortization and other cost recovery deductions taken 
into account in computing such taxable income or loss, there shall be taken into account 
Depreciation for such Fiscal Year, computed as provided in this Agreement. 


If the Company’s taxable income or loss for such Fiscal Year, as adjusted in the 
manner provided above, is a positive amount, such amount shall be the Company’s Profit for 
such Fiscal Year; and if a negative amount, such amount shall be the Company’s Loss for such 
Fiscal year. 


1.31. “Proxy” has the meaning set forth in the first paragraph of Corp C §17001 (ai). A Proxy 
may not be transmitted orally. 


1.32. “Regulations” (“Reg”) means the income tax regulations promulgated by the United 
States Department of the Treasury and published in the Federal Register for the purpose of 
interpreting and applying the provisions of the Code, as such Regulations may be amended from 
time to time, including corresponding provisions of applicable successor regulations. 


1.33. “Reserves” means the aggregate of reserve accounts that the Manager, in the Manager’s 
sole discretion, deems reasonably necessary to meet accrued or contingent liabilities of the 
Company, reasonably anticipated operating expenses, and working capital requirements. 


1.34. “Successor in Interest” means an Assignee, a successor of a Person by merger or 
otherwise by operation of law, or a transferee of all or substantially all of the business or assets of 
a Person. 


1.35. “Tax Item” means each item of income, gain, loss, deduction, or credit of the Company. 
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1.36. “Tax Matters Partner” means such Person as may be designated under Article VI, Section 
6.6. 


1.37. “Transfer” means, with respect to a Membership Interest or any element of a 
Membership Interest, any sale, assignment, gift, Involuntary Transfer, Encumbrance, or other 
disposition of such a Membership Interest or any element of such Membership Interest, directly 
or indirectly, other than an Encumbrance that is expressly permitted under this Agreement. 


1.38. “Triggering Event” is defined in Article VII, Section 8.4. 
1.39. “Vote” means a written consent or approval, a ballot cast at a meeting, or a voice vote. 


1.40. “Voting Interest” means, with respect to a Member, the right to Vote or participate in 
management and any right to information concerning the business and affairs of the Company 
provided under the Act, except as limited by the provisions of this Agreement. A Member’s 
Voting Interest shall be directly proportional to that Member’s Percentage Interest. 


ARTICLE Il: ARTICLES OF ORGANIZATION 


2.1. The Articles of Organization were filed with the California Secretary of State on 
December 15, 2009 File Number 200935110092. A copy of the Articles of Organization as filed 
is attached to this Agreement as Exhibit A. 


2.2. The name of the Company is HB Gary Federal, LLC. 


2.3. The principal executive office of the Company shall be at 3604 Fair Oaks Blvd., 
Sacramento, California 95864, or such other place or places as may be determined by the 
Managers from time to time. 


2.4. The initial agent for service of process on the Company shall be C. Angela De La 
Housaye, whose address is 1655 North Main Street, Suite 260, Walnut Creek, Califormia 94596. 
The Managers may from time to time change the Company’s agent for service of process. 


2.5. The Company will be formed for the purpose of creating technology for enterprises. 


2.6. The Members intend the Company to be a limited liability company under the Act, 
classified as a partnership for federal and, to the maximum extent possible, state income taxes. 
Neither the Manager nor any Members shall take any action inconsistent with the express intent 
of the parties to this Agreement. 


2.7. The term of existence of the Company shall commence on the effective date of filing of 


Articles of Organization with the California Secretary of State, and shall continue until 
terminated by the provisions of this Agreement or as provided by law. 
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2.8. The names, percentage of interest held, amount paid for the interest held of the Initial 
Member, and the contributed initial capital are as set forth in Exhibit B. 


2.9. The name(s) and business address(es) of the Key Members and Members are as follows: 
Key Members are Members who will retain security clearances and will manage classified 
business. Members will not manage classified business but deal in general business and day to 
day issues. 


2.10. The Members shall be the Managers of the Company. 
ARTICLE II: CAPITAL AND CAPITAL CONTRIBUTIONS 


_ 3.1. Each Member shall contribute to the capital of the Company as the Member’s initial 
Capital Contribution the money and property specified in Exhibit B. The initial Fair Market 
Value of each item of contributed property (net of liabilities secured by such property) that the 
Company is considered to assume or to take “subject to” under IRC section 752, is also set forth 
in Exhibit B, together with the description and amount of these liabilities. If a Member fails to 
make the initial Capital Contributions specified in this Section within ninety (90) days after the 
effective date of this Agreement, that Member’s entire Membership Interest shall terminate, and 
that Member shall indemnify and hold the Company and the other Members harmless from any 
Loss, cost, or expense, including reasonable attorney fees caused by the failure to make the initial 
Capital Contribution. 


3.2. No Member shall be required to make any additional Capital Contributions, except as 
outlined in this Operating Agreement as the Initial Capital Contribution (which may be paid 
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quarterly until paid in full). No Member may voluntarily make any additional Capital 
Contribution. 


3.3. The Managers may determine from time to time that Capital Contributions in addition to 
the Members’ initial Capital Contributions are needed to enable the Company to conduct its 
business. On making such a determination, the Managers shall give notice to all Members in 
writing at least 90 days before the date on which such additional Capital Contribution is due. The 
Notice shall set forth the amount of additional Capital Contribution needed, the purpose for 
which it is needed, and the date by which the Members shall contribute. Each Member shall be 
required to make an additional Capital Contribution in an amount that bears the same proportion 
to the total additional Capital Contribution that such Member’s Capital Account balance bears to 
the total Capital Account balances of all Members. No Member may voluntarily make any 
additional Capital Contribution. 


3.4. Ifa Member fails to make an additional Capital Contribution required under Section 3.2 
above within 30 days after it is required to be made (a Defaulting Member), the Manager shall 
within five days after said failure notify each other Member (a Nondefaulting Member) in writing 
of the total amount of Defaulting Member Capital Contributions not made (the Additional 
Capital Shortfall), and shall specify a number of days within which each Nondefaulting Member 
may make that additional Capital Contribution. If the total amount of Additional Capital Shortfall 
is not contributed, the Manager may use any reasonable method to provide Members the 
opportunity to make-additional Capital Contributions, until the Additional Capital Shortfall is as 
fully contributed as possible. Following the Nondefaulting Members’ making of such additional 
Capital Contributions, each Member’s Percentage Interest shall be adjusted to reflect the ratio 
that the Member’s Capital Account bears to the total Capital Accounts of all of the Members. 


3.5. An individual Capital Account for each Member shall be maintained in accordance with 
the requirements of Reg §1.704-1(b)(2)(iv) and adjusted in accordance with the following 
provisions: 


(a) A Member’s Capital Account shall be increased by that Member’s Capital 
Contributions, that Member’s share of Profits, and any items in the nature of income or gain that 
are specially allocated to that Member pursuant to Article IV. 


(b) | A Member’s Capital Account shall be increased by the amount of any Company 
liabilities assumed by that Member subject to and in accordance with the provisions of Reg 
§1.704-1(b)(2)(iv)(c). 


(c) A Member’s Capital Account shall be decreased by (a) the amount of cash 
distributed to that Member; (b) the Fair Market Value of any property of the Company so 
distributed, net of liabilities secured by such distributed property that the distributee Member is 
considered to assume or to be subject to under IRC section 752; and (c) the amount of any items 
in the nature of expenses or Losses that are specially allocated to that Member pursuant to Article 
IV. 
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(d) A Member’s Capital Account shall be reduced by the Member’s share of any 
expenditures of the Company described in IRC section 705(a)(2)(B) or which are treated as IRC 
section 705(a)(2)(B) expenditures pursuant to Reg section 1.704- 1(b)(2)Gv)@) (including 
syndication expenses and losses nondeductible under IRC sections 267(a)(1) or 707(b)). 


(e) Each Member’s Capital Account shall be increased or decreased as necessary to 
reflect a revaluation of the Company’s property assets in accordance with the requirements of the 
Reg. Code. 


3.6. No interest shall be paid on Capital Contributions or on the balance of a Member’s Capital 
Account. 


3.7. A Member shall not be bound by, or be personally liable for, the expenses, liabilities, or 
obligations of the Company except as otherwise provided in the Act or in this Agreement. 


ARTICLE IV: PROFIT ALLOCATION 


4.1 Normal Allocations. Except as otherwise provided by this Article 4, the Profit and Loss 
of the Company for each Fiscal Year (or portion thereof) shall be determined as of the end of 
each such Fiscal Year (or portion thereof) and shall be allocated among the Members in 
proportion to their respective Company Interests. 


4.2 Special Allocations Pursuant to Section 704(c). Notwithstanding the foregoing provisions 


of this Article, pursuant to the requirements of Section 704(c) of the Code and any Treasury 
Regulations promulgated thereunder, income, gain, loss and deduction with respect to any asset 
contributed to the Company by any Member shall be allocated, for tax purposes only, among the 
Members so as to take account of the variation between the adjusted tax basis of such asset to the 
Company and its Book Value computed’ in accordance with the definition of Book Value set 
forth in Article 1. In accordance with the Treasury Regulations promulgated under Section 
704(b) of the Code, in the event the Book Value of any Company asset is subsequently adjusted 
in accordance with the last sentence of such definition of Book Value, subsequent allocations of 
income, gain, loss and deduction with respect to such asset shall take account of any variation 
between the adjusted tax basis of the asset to the Company and its Book Value in the same 
manner as under Code Section 704(c) and any Treasury Regulations promulgated thereunder. 


4.3 Section 754 Election. Upon the request of any Member, the Company shall elect, 
pursuant to Section 754 of the Code, to adjust the basis of Company property as permitted and 
provided in Sections 734 and 743 of the Code. Such election shall be effective solely for Federal 
(and, if applicable, state and local) income tax purposes and shall not result in any adjustment to 
the Book Value of any Company asset or to the Members’ Capital Accounts (except as provided 
in Treasury Regulations Section 1.704-1(b)(2)(iv)(m) or in the determination or allocation of 
Profit or Loss for purposes other than such tax purposes. 


4.4 Qualified Allocations. It is the intention of the Members that this Agreement provide for 
“qualified allocations” within the meaning of Section 168(h)(6)(B) of the Code and any Treasury 
Regulations promulgated thereunder, and the Members agree that all interpretations of this 
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Agreement shall be made accordingly. The Members hereby further agree to enter into such 
amendments to this Agreement as either Member may from time to time reasonably propose to 
ensure that this Agreement continues to provide for such “qualified allocations”, provided that, in 
all instances, such amendments shall be drafted in such manner as shall most equitably distribute 
among the Members any adverse economic consequences resulting therefrom. 


4.5 Partnership Minimum Gain Chargeback. Notwithstanding any other provision of this 
Article 4, in the event there is a net decrease in “partnership minimum gain” during a Fiscal 
Year, the Members shall be allocated items of income and gain in accordance with Section 
1.704-2(f) of the Treasury Regulations. For purposes of this Article 4, the term “partnership 
minimum gain” shall have the meaning given such term in Section 1.704-2(b)(2) of the Treasury 
Regulations, and any Member’s share of partnership minimum gain shall be determined in 
accordance with Section 1.704-2(g)(1) of the Treasury Regulations. This Section 5.5 is intended 
to comply with the minimum gain chargeback requirement of Section 1.704-2(f) of the Treasury 
Regulations and shall be interpreted and applied in a manner consistent therewith. 


4.6 Partner Nonrecourse Debt. Notwithstanding any other provision of this Article 4, to the 
extent required by Section 1.704-2(i) of the Treasury Regulations, any items of income, gain, 
deduction and loss of the Company that are attributable to a nonrecourse debt of the Company 
that constitutes “partner nonrecourse debt” as defined in Section 1.704-2(b)(4) of the Treasury 
Regulations (including chargebacks of partner nonrecourse debt minimum gain) shall be 
allocated in accordance with the provisions of Section 1.704-2(i) of the Treasury Regulations. 


4.7 Alternate Test for Economic Effect/Qualified Income Offset. No allocation shall be made 


pursuant to this Article 4 to the extent that it shall cause or increase a deficit balance in any 
Member’s Capital Account (in excess of such Member’s obligation (including any deemed 
obligation under Treasury Regulations), if any, to restore a deficit in its Capital Account) as of 
the end of the Fiscal Year to which such allocation relates. In making the foregoing 
determination, a Member’s Capital Account shall be reduced by the amounts described in 
Section 1.704-1(b)(2)(ii)(d)(4), (5) and (6) of the Treasury Regulations. Any Member who 
unexpectedly receives an adjustment, allocation or distribution described in Section 1.704- 
1(b)(2)(ii)(d)(4), (5) or (6) of the Treasury Regulations shall be allocated items of income and 
gain in an amount and manner sufficient to eliminate, to the extent required by the Treasury 
Regulations, such deficit balance as quickly as possible. This Section 5.7 is intended to comply 
with the alternate test for economic effect set forth in Section 1.704-1(b)(2)(ii)(d) of the Treasury 
Regulations and shall be interpreted and applied in a manner consistent therewith. 


ARTICLE V: MANAGEMENT 


5.1. The business of the Company shall be managed by the Managers named in Article I, 
Section 2.9, or a successor Managers selected in the manner provided in Article V, Section 5.3. 
Except as otherwise set forth in this Agreement, all decisions concerning the management of the 
Company’s business shall be made by the Managers. 


5.2. The Managers shall serve until the earlier of (1) the Manager’s resignation, retirement, 
death, or disability; (2) the Manager’s removal by the Members; and (3) the expiration of the 
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Manager’s term as Manager, if a term has been designated by a Majority of Members. A new 
Manager shall be appointed by a Majority of Members on the occurrence of any of the foregoing 
events. 


5.3. Each Manager shall be appointed by a Majority of Members for (a) a term expiring with 
the appointment of a successor, or (b) a term expiring at a definite time specified by a Majority of 
Members in connection with such an appointment. A Manager who is not also a Member may be 
removed with or without cause at any time by action of a Majority of Members. 


5.4. The Manager, who shall be the President of the Company, shall have the powers and 
duties described in Section 5.8 hereof and such other powers and duties as may be prescribed in 
this Agreement or by the Members. Notwithstanding the foregoing, the Manager shall not take 
any of the following actions on behalf of the Company unless a Majority of Members has 
consented to the taking of such action. 

 & Any act that would make it impossible to carry on the ordinary business of 
the Company; 

(b) The dissolution of the Company; 

(c) The disposition of all or a substantial part of the Company’s assets not in the 
ordinary course of business; 

(e) The incurring of any debt not in the ordinary course of business; 

(f) A change in the nature of the principal business of the Company; 

(g) The incurring of any contractual obligation or the making of any capital 
expenditure with a total cost of more than $5,000.00; 

(h) The filing of a petition in bankruptcy or the entering into of an arrangement 
among creditors; and 

(i) The entering into, on behalf of the Company, of any transaction constituting a 
“reorganization” within the meaning of Corp C §17600. 


5.5. Actions of the Managers shall be taken at meetings or as otherwise provided in this 
Section 5.5 by a majority. No regular meetings of the Managers must be held. The President or 
any two Managers may call a meeting of the Managers by giving Notice of the time and place of 
the meeting at least 48 hours prior to the time of the holding of the meeting. The Notice need not 
specify the purpose of the meeting, nor the location if the meeting is to be held at the principal 
executive office of the Company. 


A majority of Managers shall constitute a quorum for the transaction of business at any 
meeting of the Managers. 


The transactions of the Managers at any meeting, however called or noticed, or wherever held, 
shall be as valid as though transacted at a meeting duly held after call and notice if a quorum is 
present and if, either before or after the meeting, each Manager not present signs a written waiver 
of notice or a consent to the holding of such meeting or an approval of the minutes of such 
meeting. 
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Any action required or permitted to be taken by the Managers under this Agreement may be. 
taken without a meeting if a majority of the Managers individually or collectively consent in 
writing to such action. 


Managers may participate in the meeting through the use of a conference telephone or similar 
communications equipment, provided that all Managers participating in the meeting can hear one 
another. 

The Managing Member, or President/CEO if one is named, shall keep or cause to be kept with 
the books and records of the Company full and accurate minutes of all meetings, notices and 
waivers of notices of meetings, and all written consents to actions of the Managers. 


5.6. It is acknowledged that the Managers have other business interests to which the Managers 
devotes part of the Managers’ time. The Managers shall devote such time to the conduct of the 
business of the Company as the Managers, in the particular Manager’s own good faith and 
discretion, deems necessary. 


5.7. The Managers shall be entitled to compensation for the Managers’ services as determined 
by the Members, and to reimbursement for all expenses reasonably incurred by the Managers in 
the performance of the Managers’ duties. 


5.8. The Company shall have a Chief executive officer , who shall be a key Manager. The 
President shall be an officer of the Company and shall have general supervision of the business 
and affairs of the Company, shall preside at all meetings of Members and of Managers, and shall 
have such other powers and duties usually vested in a president/chief operating officer. A 
Majority of the Members may provide for additional officers of the Company, may alter the 
powers and duties of the President, and shall establish the powers and duties of all other officers 
and the compensation of all Company officers. 


5.9. The Managers shall cause all assets of the Company, whether real.or personal, to be held 
in the name of the Company. 


5.10. All funds of the Company shall be deposited in one or more accounts with one or more 
recognized financial institutions in the name of the Company, at such locations as shall be 
determined: by the Manager. Withdrawal from such accounts shall require only the signature of 
the Manager or such other person or persons as the Manager may designate. 


ARTICLE VI: ACCOUNTS AND ACCOUNTING 


6.1. Complete books of account of the Company’s business, in which each Company 
transaction shall be fully and accurately entered, shall be kept at the Company’s principal 
executive office and at such other locations as the Manager shall determine from time to time and 
shall be open to inspection and copying on reasonable Notice by any Member or the Member’s 
authorized representatives during normal business hours. The costs of such inspection and 
copying shall be borne by the Member. 
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6.2. Financial books and records of the Company shall be kept on the cash method of 
accounting, which shall be the method of accounting followed by the Company for federal 
income tax purposes. The financial statements of the Company shall be prepared in accordance 
with generally accepted accounting principles and shall be appropriate and adequate for the 
Company’s business and for carrying out the provisions of this Agreement. The fiscal year of the 
Company shall be January 1 through December 31. 


6.3. At all times during the term of existence of the Company, and beyond that term if the 
Manager deems it necessary, the Manager shall keep or cause to be kept the books of account 
referred to in Section 6.2, together with: 


(a) A current list of the full name and last known business or residence address of 
each Member, together with the Capital Contribution and the share in Profits and losses 
of each Member; 

(b) A current list of the full name and business or residence address of each Manager; 
(c) A copy of the Articles of Organization, as amended; 

(d) Copies of the Company’s federal, state, and local income tax or information 
returns and reports, if any, for the six most recent taxable years; 

(e) An original executed copy or counterparts of this Agreement, as amended; 

(f) Any powers of attorney under which the Articles of Organization or any 
amendments to said articles were executed; 

(g) Financial statements of the Company for the six most recent fiscal years; and 

(h) The books and Records of the Company as they relate to the Company’s internal 
affairs for the current and past four fiscal years. 


If the Manager deems that any of the foregoing items shall be kept beyond the term of 
existence of the Company, the repository of said items shall be as designated by the Manager. 


6.4. At the end of each fiscal year the books of the Company shall be closed and examined and 
statements reflecting the financial condition of the Company and its: Profits or losses shall be 
prepared, and a report thereon shall be issued by the Company’s certified public accountants. 
Copies of the financial statements shall be given to all Members. 


6.5. Within 90 days after the end of each taxable year of the Company the Manager shall send 
to each of the Members all information necessary for the Members to complete their federal and 
state income tax or information returns and a copy of the Company’s federal, state, and local 
income tax or information returns for such year. 


6.6. A designated Manager shall act as Tax Matters Partner of the Company pursuant to IRC 
section 623 1(a)(7). 


ARTICLE VII: MEMBERSHIP-MEETINGS, VOTING, INDEMNITY 


7.1. There shall be only one class of membership and no Member shall have any rights or 
preferences in addition to or different from those possessed by any other Member except as 
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specifically provided for in Article IV. Members shall have the right and power to appoint, 
remove, and replace Managers and officers of the Company and the right to Vote on ail other 
matters with respect to which this Agreement or the Act requires or permits such Member action. 
Each Member shall Vote in proportion to the Member’s Percentage Interest as of the governing 
record date, determined in accordance with Section 7.2. If a Member has assigned all or part of 
the Member’s Economic Interest to a person who has not been admitted as a Member, the 
Assigning Member shall Vote in proportion to the Percentage Interest that the Assigning Member 
would have had, if the assignment had not been made. 


Without limiting the foregoing, all of the following acts shall require the unanimous Vote of 
the Members: 


(a) The Transfer of a Membership Interest and the admission of the Assignee as a 
Member of the Company; 


(b) Any amendment of the articles of organization or this Agreement; and 


(c) A compromise of the obligation of a Member to make a Capital Contribution 
under Article III. 


7.2. The Company may, but shall not be required, to issue certificates evidencing Membership 
Interests (Membership Interest Certificates) to Members of the Company. Once Membership 
Interest Certificates have been issued, they shall continue to be issued as necessary to reflect 
current Membership Interests held by Members. 


7.3. Meetings of the Members may be called at any time by the Manager, or by Members 
representing more than 10 percent of the Interests of the Members for the purpose of addressing 
any matters on which the Members may Vote. If a meeting of the Members is called by the 
Members, Notice of the call shall be delivered to the Manager. Meetings may be held at the 
principal executive office of the Company or at such other location as may be designated by the 
Manager. Following the call of a meeting, the Manager shall give Notice of the meeting not less 
than ten, or more than 60 calendar days prior to the date of the meeting to all Members entitled to 
Vote at the meeting. The Notice shall state the place, date, and hour of the meeting and the 
general nature of business to be transacted. No other business may be transacted at the meeting. 
A quorum at any meeting of Members shall consist of a Majority of Members, represented in 
person or by Proxy. 


7.4. At all meetings of Members, a Member may Vote in person or by Proxy. Such Proxy shall 
be filed with the Manager before or at the time of the meeting, and may be filed by facsimile 
transmission to the Manager at the principal executive office of the Company or such other 
address as may be given by the Manager to the Members for such purposes. Members may 
participate in a meeting through use of conference telephone or similar communications 
equipment, provided that all Members participating in such meeting can hear one another. Such 
participation shall be deemed attendance at the meeting. 
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7.5. Any action that may be taken at any meeting of the Members may be taken without a 
meeting if a consent in writing, setting forth the action so taken, is signed by Members having 
not less than the minimum number of Votes that would be necessary to authorize or take that 
action at a meeting at which all Members entitled to Vote thereon were present and voted. 


ARTICLE VIII: TRANSFERS OF MEMBERSHIP INTERESTS 


8.1. A Member may withdraw from the Company at any time by giving Notice of withdrawal 
to the Managers at least 180 calendar days before the effective date of withdrawal. Withdrawal 
shall not release a Member from any obligations and liabilities under this Agreement accrued or 
incurred before the effective date of withdrawal. A withdrawing Member shall divest the 
Member’s entire Membership Interest before the effective date of withdrawal in accordance with 
and subject to the provisions of this Article VIII. 


8.2. Except as expressly provided in this Agreement, a Member shall not. transfer any part of 
the Member’s Membership Interest in the Company, whether now owned or later acquired, 
unless (a) the other Members unanimously approve the transferee’s admission to the Company as 
a Member upon such Transfer and (b) the Membership Interest to be transferred, when added to 
the total of all other Membership Interests transferred in the preceding 12 months, will not cause 
the termination of the Company under the Code. No Member may Encumber or permit or suffer 
any Encumbrance of all or any part of the Member’s Membership Interest in the Company unless 
such Encumbrance has been approved in writing by the Manager. Such approval may be granted 
or withheld in the Manager’s sole discretion. Any Transfer or Encumbrance of a Membership 
Interest without such approval shall be void. Notwithstanding any other provision of this 
Agreement to the contrary, a Member who is a natural person may transfer all or any portion of 
his or her Membership Interest to any revocable trust created for the benefit of the Member, or 
any combination between or among the Member, the Member’s spouse, and the Member’s issue; 
provided that the Member retains a beneficial interest in the trust and all of the Voting Interest 
included in such Membership Interest. A Transfer of a Member’s beneficial interest in such trust, 
or failure to retain such Voting Interest, shall be deemed a Transfer of a Membership Interest. 


8.3. If a Member wishes to transfer any or all of the Member’s Membership Interest in the 
Company pursuant to a Bona Fide Offer (as defined below), the Member shall give Notice to all 
other Members at least 30 days in advance of the proposed sale or Transfer, indicating the terms 
of the Bona Fide Offer and the identity of the offeror. The Company and the other Members shall 
have the option to purchase the Membership Interest proposed to be transferred at the price and 
on the terms provided in this Agreement. If the price for the Membership Interest is other than 
cash, the fair value in dollars of the price shall be as established in good faith by the Company. 
For purposes of this Agreement, “Bona Fide Offer” means an offer in writing setting forth all 
relevant terms and conditions of purchase from an offeror who is ready, willing, and able to 
consummate the purchase and who is not an Affiliate of the selling Member. For 30 days after 
the Notice is given, the Company shall have the right to purchase the Membership Interest 
offered, on the terms stated in the Notice, for the lesser of (a) the price stated in the Notice (or the 
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price plus the dollar value of noncash consideration, as the case may be) and (b) the price 
determined under the appraisal procedures set forth in Section 8.8. 


If the Company does not exercise the right to purchase all of the Membership Interest, then, 
with respect to the portion of the Membership Interest that the Company does not elect to 
purchase, that right shall be given to the other Members for an additional 30-day period, 
beginning on the day that the Company’s right to purchase expires. Each of the other Members 
shall have the right to purchase, on the same terms, a part of the interest of the offering Member 
in the proportion that the Member’s Percentage Interest bears to the total Percentage Interests of 
all of the Members who choose to participate in the purchase; provided, however, that the 
Company and the participating Members may not, in the aggregate, purchase less than the entire 
interest to be sold by the offering Member. 


If the Company and the other Members do not exercise their rights to purchase all of the 
Membership Interest, the offering Member may, within 90 days from the date the Notice is given 
and on the terms and conditions stated in the Notice, sell or exchange that Membership Interest 
to the offeror named in the Notice. Unless the requirements of Section 8.2 are met, the offeror 
under this section shall become an Assignee, and shall be entitled to receive only the share of 
Profits or other compensation by way of income and the return of Capital Contribution to which 
the assigning Member would have been entitled. 


8.4. On the happening of any of the following events (Triggering Events) with respect to a 
Member, the Company and the other Members shall have the option to purchase the Membership 
Interest in the Company of such Member (Selling Member) at the price and on the terms 
provided in Section 8.8 of this Agreement: 


(a) The death, incapacity, bankruptcy, or withdrawal of a Member, or the winding up 
and dissolution of a corporate Member, or merger or other corporate reorganization of a 
corporate Member as a result of which the corporate Member does not survive as an entity. 


(b) The failure of a Member to make the Member’s Capital Contribution pursuant to 
the provisions of Article III of this Agreement. 


(c) The occurrence of any other event that is, or that would cause, a Transfer in 
contravention of this Agreement. 
Each Member agrees to promptly give Notice of a Triggering Event to the Managers. 


8.5. Notwithstanding any other provisions of this Agreement: 


(a) If, in connection with the divorce or dissolution of the marriage of a Member, any 
court issues a decree or order that transfers, confirms, or awards a Membership Interest, or any 
portion thereof, to that Member’s spouse (an “Award”), then, notwithstanding that such transfer 
would constitute an unpermitted Transfer under this Agreement, that Member shall have the right 
to purchase from his or her former spouse the Membership Interest, or portion thereof, that was 
so transferred, and such former spouse shall sell the Membership Interest or portion thereof to 
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that Member at the price set forth below in Section 8.8 of this Agreement. If the Member has 
failed to consummate the purchase within 180 days after the court award (the Expiration Date), 
the Company and the other Members shall have the option to purchase from the former spouse 
the Membership Interest or portion thereof pursuant to Section 8.6 of this Agreement; provided 
that the option period shall commence on the later of (1) the day following the Expiration Date, 
or (2) the date of actual notice of the Award. 


(b) If, by reason of the death of a spouse of a Member, any portion of a Membership 
Interest is transferred to a Transferee other than (1) that Member or (2) a trust created for the 
benefit of that Member (or for the benefit of that Member and any combination between or 
among the Member and the Member’s issue) in which the Member is the sole Trustee and the 
Member, as Trustee or individually possesses all of the Voting Interest included in that 
Membership Interest, then the Member shall have the right to purchase the Membership Interest 
or portion thereof from the estate or other successor of his or her deceased spouse or Transferee 
of such deceased spouse, and the estate, successor, or Transferee shall sell the Membership 
Interest or portion thereof at the price set forth in Section 8.8 of this Agreement. If the Member 
has failed to consummate the purchase within 180 days after the date of death (the Expiration 
Date), the Company and the other Members shall have the option to purchase from the estate or 
other successor of the deceased spouse the Membership Interest or portion thereof pursuant to 
Section 8.6 of this Agreement; provided that the option period shall commence on the later of (1) 
the day following the Expiration Date, or (2) the date of actual notice of the death. 


8.6. On the receipt of Notice by the Manager and the other Members as contemplated by 
Sections 8.1, 8.3, and 8.5, and on receipt of actual notice of any Triggering Event as determined 
in good faith by the Manager (the date of such receipt is hereinafter referred to as the “Option 
Date”), the Manager shall promptly cause a Notice of the occurrence of'such a Triggering Event 
to be sent to all Members, and the Company shall have the option, for a period ending 30 
calendar days following the determination of the purchase price as provided in Section 8.8, to 
purchase the Membership Interest in the Company to which the option relates, at the price and on 
the terms set forth in Section 8.8 of this Agreement, and the other Members, pro rata in 
accordance with their prior Membership Interests in the Company, shall then have the option, for 
a period of 30 days thereafter, to purchase the Membership Interest in the Company not 
purchased by the Company, on the same terms and conditions as apply to the Company. If all 
other Members do not elect to purchase the entire remaining Membership Interest in the 
Company, then the Members electing to purchase shall have the right, pro rata in accordance 
with their prior Membership Interest in the Company, to purchase the additional Membership 
Interest in the Company available for purchase. The transferee of the Membership Interest in the 
Company that is not purchased shall hold such Membership Interest in the Company subject to 
all of the provisions of this Agreement. 


8.7. Neither the Member whose interest is subject to purchase under this Article, nor such 


Member’s Affiliate, shall participate in any Vote or discussion of any matter pertaining to the 
disposition of the Member’s Membership Interest in the Company under this Agreement. 
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8.8. The purchase price of the Membership Interest that is the subject of an option under 
Section 8.6 shall be the “Fair Option Price” of the interest as determined under this Section 8.8. 
“Fair Option Price” means the cash price that a willing buyer would pay to a willing seller when 
neither is acting under compulsion and when both have reasonable knowledge of the relevant 
facts on the Option Date. Each of the selling and purchasing parties shall use his, her, or its best 
efforts to mutually agree upon the Fair Option Price. If the parties are unable to so agree within 
30 days of the Option Date, the selling party shall appoint, within 40 days of the Option Date, 
one appraiser, and the purchasing party shall appoint within 40 days of the Option Date, one 
appraiser. The two appraisers shall within a period of five additional days, agree upon and 
appoint an additional appraiser. The three appraisers shall, within 60 days after the appointment ~ 
of the third appraiser, determine the Fair Option Price of the Membership Interest in writing and 
submit their report to all the parties. 


The Fair Option Price shall be determined by disregarding the appraiser’s valuation that 
diverges the greatest from each of the other two appraisers’ valuations, and the arithmetic mean 
of the remaining two appraisers’ valuations shall be the Fair Option Price. Each purchasing party 
shall pay for the services of the appraiser selected by it, plus one half of the fee charged by the 
third appraiser, and one half of all other costs relating to the determination of Fair Option Price. 
The Fair Option Price as so determined shall be payable in cash. 


8.9. The initial sale of Membership Interests in the Company to the Initial Members has not 
been qualified or registered under the securities laws of any state, including California, or 
registered under the Securities Act of 1933, in reliance upon exemptions from the registration 
provisions of those laws. Notwithstanding any other provision of this Agreement, Membership 
Interests may not be Transferred unless registered or qualified under applicable state and federal 
securities law unless, in the opinion of legal counsel satisfactory to the Company, such 
qualification or registration is not required. The Member who desires to transfer a Membership 
Interest shall be responsible for all legal fees incurred in connection with said opinion. 


ARTICLE IX: DISSOLUTION AND WINDING UP 
9.1. The Company shall be dissolved upon the first to occur of the following events: 
(a) The written agreement of all Majority of Members to dissolve the Company. 
(b) ‘The sale or other disposition of substantially all of the Company’s assets. 
(c) Entry of a decree of judicial dissolution under Corporations Code section 17351. 
9.2. On the dissolution of the Company, the Company shall engage in no further business other 
than that necessary to wind up the business and affairs of the Company. The Managers who have 
not wrongfully dissolved the Company or, if there is no such Manager, the Members, shall wind 
up the affairs of the Company. The Delegates winding up the affairs of the Company shall give 


Notice of the commencement of winding up by mail to all known creditors and claimants against 
the Company whose addresses appear in the records of the Company. After paying or adequately 
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providing for the payment of all known debts of the Company (except debts owing to Members), 
the remaining assets of the Company shall be distributed or applied in the following order: 


(a) To pay the expenses of liquidation. 


(b) To the establishment of reasonable reserves by the Delegate for contingent 
liabilities or obligations of the Company. Upon the Delegate’s determination that such reserves 
are no longer necessary, said reserves shall be distributed as provided in this Section 9.2. 


(c) To repay outstanding loans to Members. If there are insufficient funds to pay such 
loans in full, each Member shall be repaid in the ratio that the Member’s loan, together with 
interest accrued and unpaid thereon, bears to the total of all such loans from Members, including 
all interest accrued and unpaid thereon. Such repayment shall first be credited to unpaid principal 
and the remainder shall be credited to accrued and unpaid interest. 

(d) | Among the Members with Positive Capital Account Balances. 


9.3. Each Member shall look solely to the assets of the Company for the return of the 
Member’s investment, and if the Company property remaining after the payment or discharge of 
the debts and liabilities of the Company is insufficient to return the investment of each Member, 
such Member shall have no recourse against any other Members for indemnification, 
contribution, or reimbursement, except as specifically provided in this Agreement, and as 
specifically provided in Section 9.4. 


9.4. To the extent that any Member’s Capital Account is negative, upon dissolution or 
termination of the Membership, for any reason, then that Member shall be required to replenish 
the Capital account on or before the dissolution or termination event. Additionally, no Member’s 
distribution or profit allocatin shall be paid if that Member’s Capital Account remains at a 
deficit. The Member shall be required to replenish his or her account so that there is no deficit 
remaining prior to any such distribution of profits. 


ARTICLE X: INDEMNIFICATION AND ARBITRATION 


10.1. The Company shall have the power to indemnify any Person who was or is a party, or 
who is threatened to be made a party, to any Proceeding by reason of the fact that such Person 
was or is a Member, Manager, officer, employee, or other agent of the Company, or was or is 
serving at the request of the Company as a director, officer, employee, or other Agent of another 
limited liability company, corporation, partnership, joint venture, trust, or other enterprise, 
against expenses, judgments, fines, settlements, and other amounts actually and reasonably 
incurred by such Person in connection with such proceeding, if such Person acted in good faith 
and in a manner that such Person reasonably believed to be in the best interests of the Company, 
and, in the case of a criminal proceeding, such Person had no reasonable cause to believe that the 
Person’s conduct was unlawful. The termination of any proceeding by judgment, order, 
settlement, conviction, or upon a plea of nolo contendere or its equivalent, shall not, of itself, 
create a presumption that the Person did not act in good faith and in a manner that such Person 
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reasonably believed to be in the best interests of the Company, or that the Person had reasonable 
cause to believe that the Person’s conduct was unlawful. 


10.2. Any action to enforce or interpret this Agreement, or to resolve disputes with respect to 
this Agreement as between the Company and a Member, or between or among the Members, 
shall be settled by arbitration in accordance with the rules of the American Arbitration 
Association. Arbitration shall be the exclusive dispute resolution process in the State of 
California, but arbitration shall be a nonexclusive process elsewhere. Any party may commence 
arbitration by sending a written demand for arbitration to the other parties. Such demand shall set 
forth the nature of the matter to be resolved by arbitration. The Manager shal! select the place of 
arbitration. The substantive law of the State of California shall be applied by the arbitrator to the 
resolution of the dispute. The parties shall share equally all initial costs of arbitration. The 
prevailing party shall be entitled to reimbursement of attorney fees, costs, and expenses incurred 
in connection with the arbitration. All decisions of the arbitrator shall be final, binding, and 
conclusive on all parties. Judgment may be entered upon any such decision in accordance with 
applicable law in any court having jurisdiction thereof. The arbitrator Gf permitted under 
applicable law) or such court may issue a writ of execution to enforce the arbitrator’s decision. 


ARTICLE XI: ATTORNEY-IN-FACT AND AGENT 


11.1. Each Member, by execution of this Agreement, constitutes and appoints each Manager 
and any of them acting alone as such Member’s true and lawful attorney-in-fact and agent, with 
full power and authority in such Member’s name, place, and stead to execute, acknowledge, and 
deliver, and to file or record in any appropriate public office: (a) any certificate or other 
instrument that may be necessary, desirable, or appropriate to qualify the Company as a limited 
liability company or to transact business as such in any jurisdiction in which the Company 
conducts business; (b) any certificate or amendment to the Company’s articles of organization or 
to any certificate or other instrument that may be necessary, desirable, or appropriate to reflect an 
amendment approved by the Members in accordance with the provisions of this Agreement; (c) 
any certificates or instruments that may be necessary, desirable, or appropriate to reflect the 
dissolution and winding up of the Company; and (d) any certificates necessary to comply with 
the provisions of this Agreement. This power of attorney will be deemed to be coupled with an 
interest and will survive the Transfer of the Member’s Economic Interest. Notwithstanding the 
existence of this power of attorney, each Member agrees to join in the execution, 
acknowledgment, and delivery of the instruments referred to above if requested to do so by a 
Manager. This power of attorney is a limited power of attorney and does not authorize any 
Manager to act on behalf of a Member except as described in this Article XI. 


ARTICLE XII: GENERAL PROVISIONS 


12.1. This Agreement constitutes the whole and entire agreement of the parties with respect to 
the subject matter of this Agreement, and it shall not be modified or amended in any respect 
except by a written instrument executed by all the parties. This Agreement replaces and 
supersedes all prior written and oral agreements by and among the Members and Managers or 
any of them. 
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12.2. This Agreement may be executed in one or more counterparts, each of which shall be 
deemed an original, but all of which together shall constitute one and the same instrument. 


12.3. This Agreement shall be construed and enforced in accordance with the internal laws of 
the State of California. If any provision of this Agreement is determined by any court of 
competent jurisdiction or arbitrator to be invalid, illegal, or unenforceable to any extent, that 
provision shall, if possible, be construed as though more narrowly drawn, if a narrower 
construction would avoid such invalidity, illegality, or unenforceability or, if that is not possible, 
such provision shall, to the extent of such invalidity, illegality, or unenforceability, be severed, 
and the remaining provisions of this Agreement shall remain in effect. 


12.4. This Agreement shall be binding on and inure to the benefit of the parties and their heirs, 
personal representatives, and permitted successors and assigns. 


12.5. Whenever used in this Agreement, the singular shall include the plural and the plural 
shall include the singular, and the neuter gender shall include the male and female as well as a 
trust, firm, company, or corporation, all as the context and meaning of this Agreement may 
require. 


12.6. The parties to this Agreement shall promptly execute and deliver any and all additional 
documents, instruments, notices, and other assurances, and shall do any and all other acts and 
things, reasonably necessary in connection with the performance of their respective obligations 
under this Agreement and to carry out the intent of the parties. 


12.7. Except as provided in this Agreement, no provision of this Agreement shall be construed 
to limit in any manner the Members in the carrying on of their own respective businesses or 
activities. 


12.8. Except as provided in this Agreement, no provision of this Agreement shall be construed 
to constitute a Member, in the Member’s capacity as such, the agent of any other Member. 


12.9. Each Member represents and warrants to the other Members that the Member has the 
capacity and authority to enter into this Agreement. 


12.10. The article, section, and paragraph titles and headings contained in this Agreement are 
inserted as matter of convenience and for ease of reference only and shall be disregarded for all 
other purposes, including the construction or enforcement of this Agreement or any of its 
provisions. 


12.11. This Agreement may be altered, amended, or repealed only by a writing signed by all of 
the Members. 


12.12. Time is of the essence of every provision of this Agreement that specifies a time for 
performance. 
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12.13. This Agreement is made solely for the benefit of the parties to this Agreement and their 
respective permitted successors and assigns, and no other person or entity shall have or acquire 
any right by virtue of this Agreement. 


[Signatures on Following Page] 


IN WITNESS WHEREOEF, the parties have executed or caused to be executed this Agreement 
on the day and year first above written. 
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EXHIBIT A 


Articles of Organization are attached as Exhibit A. 


Exhibit A 
HB Gary Federal, LLC Operating Agreement 
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SCHEDULE 1 to EXHIBIT B 


Certain Members are granted capital account interest because of the intangible assets, training, 
contacts and experience they bring to HB Gary Federal LLC. These intangible assets are 
described below. Each Member contributing intangible assets and/or accepting interest for the 
asset they contribute, understands and acknowledges that they will be responsible for any 
individual tax implications resulting from such contribution. 


Goodwill: aintain relationships with numerous Government officials within 
the Department of Defense (DOD), and Intelligence Community (IC) including the Departments of the 
Army, Navy, Air Force, DNI, CIA, NSA, DIA, and DOE. Additionally, they maintain relationships 
with senior level management of major defense contractors including Northrop Grumman, SAIC, 
Lockheed Martin, General Dynamics, Mantech, Palantir, CSC, and Raytheon. Their relationships and 
reputations with these customers will result in continued patronage through HBGary Federal LLC. 


Workforceimplsced _potie to HBGary Federal LLC as an assembled 
workforce with specific experience, education, and training that will enable them to conduct business 


with Government customers. 


Information Based posits customer lists and personal contact information 
for numerous senior Government Officials and senior leadership at Defense Contractor companies that 
represent high value customer targets for HBGary Federal LLC. Contacts include personnel from the 
Departments of the Army, Navy, Air Force, DNI, CIA, NSA, DIA, and DOE and executive level 
management of major defense contractors including Northrop Grumman, SAIC, Lockheed Martin, 


General Dynamics, Mantech, Palantir, CSC, and Raytheon. 


Knowhow have extensive knowledge and experience with Government 
contracting processes, procedures, and regulations relating to providing classified support in 
accordance with Federal Acquisition Regulations (FAR). Additionally. they possess knowledge of 
customer strategic goals, budgets and procurement ee hes successfully 
managed government contracts and internal research and development programs in excess of $25 
million. 


Government Licenses & Permits: 
Qualifying for this level of Government security clearance generally takes 12-18 


months. These qualifications are required to conduct business with specific DoD and IC customers. 
Having them in place will enable HBGary Federal LLC to conduct business providing classified 
support. 


Schedule 1 to Exhibit B 
HB Gary Federal, LLC Operating Agreement 
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Send a fax for FREE! 


www.myfax.com/free 


faxing simplified. arydime. anywhere. 


Recipient Information: 
To: 

Fax: 19164811460 
Subject: 


Sender Information: 


From: 

Pages: 11 

Date: Feb 06, 2011 
Comments: 


This fax was sent using the MyFax free fax service. MyFax does not tolerate fraud and abuse. If this fax is spam, 
promotes illegal activity or is abusive, please email support@myfax.com. To have your fax number placed in a Do 
Not Fax list, please call 1-866-208-5903. 
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ANONYMOUS PRESS RELEASE /¢ 
January 6, 2011 ( 


Anonymous Concedes Defeat 


A recent article in the Financial Times cites a certain Aaron Barr of 
the “security services” firm HBGay Federal (amirite?) as claiming to 
have discovered the identities of Anonymous’ operating leadership 
and founder, with this having been accomplished in large part by 
an infiltration of our entirely secret IRC server anonops.ru and in 
particular our ultra-clasified channels #opegypt, #optunisia, and, of 
course, #reporiers, which itself is the most secret of all. 


The following message was relayed to all Anons possessing at least 
30 degrees of initiate status (17 in Scotland) or their equivalent in 
reddit karma, and is being leaked to the laity in an effort to gain their 
useless sympathy: 


URGENT WARNING TO ALL ANONONYMOUS HACKTIVISTS: 


Mr. Barr has successfully broken through our over 9000 proxy field 
and into our entirely non-public and secret insurgent IRC lair, where 
he then smashed through our fire labyrinth with vigor, collected all 
the gold rings on the way, opened a 50 silver key chest to find Anon’s 
legendary hackers on steroids password. 


As Mr. Barr has discovered in spite of our best efforts, Anonymous 
was founded by © last Thursday at the guilded Bilderberg Hotel after 
a tense meeting with one Morrowind mod collection, which itself 
includes the essential Morrowind Comes Alive 5.2 as well as several 
retexturing packs, all of which seem to lower one’s FPS unless one 
has also installed the latest Risc Architecture framework and thus 
obtained the killer refresh rate that is the right of all world citizens, 
except for noted heterosexual Tom Cruise. 


In addition fo the sudden disappearance of Anonymous leader Q, 
Anonymous co-founder Justin Bieber also disappeared just before his 
top-secret mission to Eritrea to offer physical succour to the rebels, 
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suggesting that Mubarak is in our base, eating our Cheetos, likely 
with military support authorized by Hill Dawg. Ali of this comes at a 
low point for the Official Anonymous Organization, inc. and its valued 
shareholders; several Anons had already lost thelr Fallout New Vegas 
saved games in the unwarranted and faggy raids perpetrated by the 
U.S. federales. 


At this point, it is safe to assume that the underground server sites 
at the North Pole have been compromised as well. Back up all porn 
drives now, because the super secret P2P centralized distribution 
server of Backdoor Sluts 9 is presumed to be immediately threatened. 
Male Anons have been commanded to switch back to traditional 
tentacle porn while femanons, or “Rei Ayanami wannabes,” continue 
to be shared among the Echelon Nine Working Group that has since 
replaced Owen as sky marshall. 


However, David Davidson (who might also be the legendary Ceiling 
Cat, as rumors have it) so far eludes custody, so all is not lost. 
Mr Davidson skyped the anonymous leaders from his hideout in 
Philadelphia to remind them that he was “Never gonna give them 
up, never gonna let them down”, Meanwhile, the board of directors 
remains little more than a gin-addled menagerie of puppets. 


Despite these setbacks, the planned conference in Viennais notslated 
for cancellation, although the buffet may be altered to include fewer 
Cheetos. The scheduled appearence of Boxxy is a subject of much 
contention within Anonymous ranks, being an event of considerably 
greater importance than the 4th return of Raptor Jesus, which itself is 
older than the internet. 


We shail note in conclusion that we like the guy and wantto believe him, 
but we still have to ask: Did Aaron Barr shave and murder Alexander 
Hamilton in 19937 We're just asking questions here, people. At any 
rate, the Pink Horse prophecy will soon be fulfilled. 

All Hail Xenu, 


-Anonymous 


